Splunk Enterprise Security

How do I assign user permissions to all or some Data models in ES? Thank u very much in advance

SamHTexas
Builder

If a saved search in ES data model. Should I be giving user permission to edit to the search & permission to the edit the data models?

Labels (1)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Do you trust your users enough to let them modify datamodels?  I don't and I don't even know them.  DMs are central to almost everything ES does so it's essential they be stable.  Only let admins touch them.  IMO.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...