How prevent to see "Apps" to user in splunk enterprise 9.0.2?

[nikhilmfwd]

Hello team,

Please help me out for this, i made one view-only role & attached to user. My requirement is when that user will open splunk that he can see only search & reporting not apps or "Apps" icon.

How prevent to see "Apps" to user in splunk enterprise 9.0.2?

 

[richgalloway]

The first step is to assign a default app to the new view-only role.  That will ensure the user goes directly to that app right after login.

The second step is to change all other apps so the view-only role cannot access them.  For each app in the Manage Apps page, go to Permissions and choose the roles that are allowed access to the app.  Whenever a new role is created, repeat this process.

[nikhilmfwd · Accepted solution]

Hello richgalloway,

Thanks for revert, my requirement is that "client should not be able to view which apps are configures in splunk". So can we disable that for them for that particular user or role?

[enzomialich]

Just don't assign app permissions for the roles you don't want to interact with the app. If they don't have write or read permissions they won't see the app (expecting that the role doenst contain any admin rights).

You could also see the discussion: https://community.splunk.com/t5/Security/How-do-I-restrict-which-apps-are-visible-to-a-specific-AD-g...

[nikhilmfwd]

thanks enzomialich.. Its works for me.