Splunk Enterprise

Is there a way to be able to view users without having Edit User access?

kozanic_mg
Explorer

We have a situation where we need to have General day to day admin Role and an Elevated admin role.

Day to Day will allow for most things, but should not allow for creation / deletion of local accounts.

Setting this up is easy, only issues is, even though I have admin all objects, I'm not able to see any other users details - i.e. I can't see any other users when I try to re-assign objects, I can't see any other users details when running rest calls - to see how they are set-up etc.

Just wondering if anyone else has run into anything like this and managed to figure out a way to work around it?

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...