Splunk Cloud Platform

Why am I unable to delete users from can_delete role?

Dany-Abou-Asali
New Member

Hi 

We have this role in our Splunk instance (can_delete) and that role allows users to delete any data or indexes in Splunk
If I select users from settings and try to delete that role from all users, it shows that this role is deleted but when I refresh the page I see that the role is back again to the users

Can someone advise please?

 

Thanks

Labels (2)
0 Karma

manjunathmeti
Champion

hi @Dany-Abou-Asali,

Role can_delete might be inherited in the role(s) that these users belong to.

Share the authorize.conf.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...