Where do I find info on What Default Indexes are assigned to Splunk user Roles please? How to edit them? Thank u

[SamHTexas]

I need to make a list of Default Indexes assigned to each user role by default & where do I look to edit the settings? I need to learn how to specify Indexes to Splunk user roles please. Thank u very much in advance.

[isoutamo]

Hi

those are defined on authorize.conf https://docs.splunk.com/Documentation/Splunk/8.2.2/Admin/Authorizeconf

Here are some answers where we have do same kind of discussions. Probably you could/should change those examples if those are not given the needed output?

• https://community.splunk.com/t5/Security/Effective-permission-for-user-in-multiple-roles/m-p/525670
• https://community.splunk.com/t5/Dashboards-Visualizations/default-home-dashboard-for-each-specific-u...

r. Ismo