Splunk Enterprise

Is there a way to be able to view users without having Edit User access?

kozanic_mg
Explorer

We have a situation where we need to have General day to day admin Role and an Elevated admin role.

Day to Day will allow for most things, but should not allow for creation / deletion of local accounts.

Setting this up is easy, only issues is, even though I have admin all objects, I'm not able to see any other users details - i.e. I can't see any other users when I try to re-assign objects, I can't see any other users details when running rest calls - to see how they are set-up etc.

Just wondering if anyone else has run into anything like this and managed to figure out a way to work around it?

0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...