Splunk Enterprise

Need to provide user upload lookup only on one particular app

bapun18
Communicator

Need to provide user upload lookup only on one particular app permission. Hi I need to assign permission to particular role/User so that they can upload there CSV lookup files to only that perticular app, not to any other apps.

Can anyone help me with it.

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @bapun18 

Your user will need a role which has write permissions in the app that you want them to be able to upload a lookup to.

You can update your app's read/write permissions at https://YourSplunkInstance/en-US/manager/permissions/search/apps/local/<YourAppName>

livehybrid_0-1744975045572.png

 

You also need the 'upload_lookup_files' capabilty which is part of the default "user" role and anything which inherits the user role.

This does also mean that a user can upload a lookup to any app which their role has write permissions to.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma

khj
Explorer

If you remove the read permission for that user role from the app permission, that user will no longer be able to select that app.

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...