Splunk Enterprise

Navigation Permissions Custom Build App

Becherer
Explorer

Hello, I am looking to only make a few views only available to a "Role". Lets say everyone will have access to the app named "Internal Views".

Lets say we have two user groups:

  1. Internal_View_User
  2. Internal_View_Power

 

I only want views in the app to be seen if you're in a certain group. 

 

This is what "Navigation menu XML" looks like.

<nav search_view="search" color="#425363">


<view name="Home" />
<view name="dashboards" />

<view name="Internal_Views_Dashboard" />
<view name="datasets" />
<view name="reports" />
<view name="alerts" />
<view name="search" />

</nav>

 

This is what I was hoping to do.

<nav search_view="search" color="#425363">


<view name="Home" />
<view name="dashboards" /> Permissions: [Internal_View_Power]

<view name="Internal_Views_Dashboard" /> Permissions: [Internal_View_User, Internal_View_Power]
<view name="datasets" />  Permissions: [Internal_View_Power]
<view name="reports" />  Permissions: [Internal_View_Power]
<view name="alerts" />  Permissions: [Internal_View_Power]
<view name="search" />  /> Permissions: [Internal_View_User, Internal_View_Power]

</nav>

 

 

 

Whats the best way to complete this?

Thank you for any ideas!

Labels (3)
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Becherer 

Navigation refers the access of dashboard of logged in person. Means if login person have dashboard access then navigation of that dashboard will shown else not.

So I think you should create a roles as per the group and assign that roles to user. 

Provide permission to respective dashboard. Please go through below links for same.

https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/Addandeditroles

https://docs.splunk.com/Documentation/Splunk/8.2.0/Viz/DashboardPermissions

 

Thanks
KV
▄︻̷̿┻̿═━一

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...