Unable to add colleagues as Multiple collaborators in the investigation

[sreedharmallemp]

hi all,

We are not able to add any other colleagues as collaborator for the invetsigations. Can someone please help me what role has to be added.

ESS Analyst has below roles related to investigation already added.

manage_all_investigations

Thanks!
SM

[lkutch_splunk]

Do the others have edit_timeline? They might need that one for being a collaborator.

https://docs.splunk.com/Documentation/ES/6.2.0/Install/ConfigureUsersRoles#Capabilities_specific_to_...