Splunk Enterprise

Is there a way to be able to view users without having Edit User access?


We have a situation where we need to have General day to day admin Role and an Elevated admin role.

Day to Day will allow for most things, but should not allow for creation / deletion of local accounts.

Setting this up is easy, only issues is, even though I have admin all objects, I'm not able to see any other users details - i.e. I can't see any other users when I try to re-assign objects, I can't see any other users details when running rest calls - to see how they are set-up etc.

Just wondering if anyone else has run into anything like this and managed to figure out a way to work around it?

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!