Splunk add-on for salesforce

[sarit_s6]

Hello

How can i give the users permissions to create new inputs ? i've changes the app permission so their role will have write permission but still they cannot add new inputs 

[kiran_panchavat]

@sarit_s6 

Refer this

https://community.splunk.com/t5/Deployment-Architecture/Normal-User-role-to-access-and-add-Data-Inpu... 

[kiran_panchavat]

@sarit_s6 

The add-on is configured so that all users have read access, while only Admin and Power User roles have write access.

[]
access = read : [ * ], write : [ admin, sc_admin, power ]
export = system

[views]
access = read : [ * ], write : [ admin ]
export = none

[kiran_panchavat]

@sarit_s6 

Which role has been assigned to the user? Is the user set as a regular User, a Power User, or an Admin?

[sarit_s6]

thanks

the user is basic user but i added his role to the write permission
im using splunk cloud so i cannot see the configuration files, just the web ui

[kiran_panchavat]

@sarit_s6Does the user have the capability to create a new input?

https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/9.4/manage-splunk-... 

[sarit_s6]

which capability should it be ? im using splunk cloud and not enterprise 

[kiran_panchavat]

@sarit_s6 

Note: In nearly all cases, capabilities whose names begin with edit_ give users the ability to perform create, read, update, and delete operations for the feature with which they associate. For example, the edit_udp capability grants you the ability to create, read, update, and delete UDP network inputs - even if you do not have access to edit other types of inputs. Exercise caution when assigning edit_ capabilities.

https://help.splunk.com/en/splunk-cloud-platform/administer/manage-users-and-security/9.3.2411/manag... 

[sarit_s6]

Hello

There is no relevant capability for this addon that i can see
and i don't want to give the user more capabilities than he needs