Splunk Enterprise

Is there a way to be able to view users without having Edit User access?

kozanic_mg
Explorer

We have a situation where we need to have General day to day admin Role and an Elevated admin role.

Day to Day will allow for most things, but should not allow for creation / deletion of local accounts.

Setting this up is easy, only issues is, even though I have admin all objects, I'm not able to see any other users details - i.e. I can't see any other users when I try to re-assign objects, I can't see any other users details when running rest calls - to see how they are set-up etc.

Just wondering if anyone else has run into anything like this and managed to figure out a way to work around it?

0 Karma
Get Updates on the Splunk Community!

Harnessing Splunk’s Federated Search for Amazon S3

Managing your data effectively often means balancing performance, costs, and compliance. Splunk’s Federated ...

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...