Capability admin_all_objects for accessing KVstore...

Splunk Dev

HI ,

I'm working on developing a app, I observed that the only capability available for a user to access or edit kvstore is using admin_all_object.

Can you please suggest if there are any other capability to achieve this?

As a admin we do not prefer giving users this capability(admin_all_object) just to access the kvstore.

Even if i give this capability the app inspect ,points out at this as an error.

check_authorize_conf_admin_all_objects_privileges

default/authorize.conf [role_cs_admin] contains `admin_all_objects = enabled`. File: default/authorize.conf Line Number: 16

Get Updates on the Splunk Community!

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...

Capability admin_all_objects for accessing KVstore?