- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello team,
Please help me out for this, i made one view-only role & attached to user. My requirement is when that user will open splunk that he can see only search & reporting not apps or "Apps" icon.
How prevent to see "Apps" to user in splunk enterprise 9.0.2?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello richgalloway,
Thanks for revert, my requirement is that "client should not be able to view which apps are configures in splunk". So can we disable that for them for that particular user or role?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


The first step is to assign a default app to the new view-only role. That will ensure the user goes directly to that app right after login.
The second step is to change all other apps so the view-only role cannot access them. For each app in the Manage Apps page, go to Permissions and choose the roles that are allowed access to the app. Whenever a new role is created, repeat this process.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello richgalloway,
Thanks for revert, my requirement is that "client should not be able to view which apps are configures in splunk". So can we disable that for them for that particular user or role?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Just don't assign app permissions for the roles you don't want to interact with the app. If they don't have write or read permissions they won't see the app (expecting that the role doenst contain any admin rights).
You could also see the discussion: https://community.splunk.com/t5/Security/How-do-I-restrict-which-apps-are-visible-to-a-specific-AD-g...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
