Splunk Dev

Capability admin_all_objects for accessing KVstore?

jabezds
Path Finder

HI ,

I'm working on developing a app, I observed that the only capability available for a user to access or edit kvstore is using admin_all_object.

Can you please suggest if there are any other capability to achieve this?

As a admin we do not prefer giving users this capability(admin_all_object) just to access the kvstore.

 

Even if i give this capability the app inspect ,points out at this as an error.

check_authorize_conf_admin_all_objects_privileges

  • default/authorize.conf [role_cs_admin] contains `admin_all_objects = enabled`. File: default/authorize.conf Line Number: 16

 

Labels (3)
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...