Capability admin_all_objects for accessing KVstore...

Splunk Dev

HI ,

I'm working on developing a app, I observed that the only capability available for a user to access or edit kvstore is using admin_all_object.

Can you please suggest if there are any other capability to achieve this?

As a admin we do not prefer giving users this capability(admin_all_object) just to access the kvstore.

Even if i give this capability the app inspect ,points out at this as an error.

check_authorize_conf_admin_all_objects_privileges

default/authorize.conf [role_cs_admin] contains `admin_all_objects = enabled`. File: default/authorize.conf Line Number: 16

Get Updates on the Splunk Community!

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...

Capability admin_all_objects for accessing KVstore?