Splunk Users not visible

[uagraw01]

Hello Splunkers!!

I have reassigned all the knowledge objects of 5 users to admin user. After that those users are not visible in user list when I am logging with "Admin User". Please help to identify the root cause and to fix this scenario.

Thanks in advance.

[PickleRick]

This one?

https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Enterprise-upgrade-to-9-1-0-1-all-users-dis...

[uagraw01]

Hi @PickleRick , I am facing the similar issue. 

Exactly I need to do ?  shall I change 'grandableRoles' =admin in autoritize.conf file ?

[PickleRick]

As far as I remember (that was some time ago) it happened when users' roles allowed them to grant roles but had no list of grantable roles specified whatsoever. So you have to make sure that there is at least one role listed as grantablRoles for those users.

[uagraw01]

@PickleRick  As per the link you shared at first place. There mentioned that remove 'grandableRoles' =admin  from the admin user from authorize.conf file. Is that workaround will work or shall I try ?

[PickleRick]

No. In case of this particular bug it was the other way around. Don't remove grantableRoles. Add it if you don't have it. But that was my issue. Yours can be a different one.

[uagraw01]

Hi @PickleRick, Do you any clue for fix with any other possible way workaround ?

[PickleRick]

Nope. That was the issue that I had. If yours is caused  by something else - you might need to raise a support ticket.