Splunk Enterprise

splunk - get all users

chen
Observer

I created a role with the capabilities 'edit_license' and 'edit_user', but I didn't receive all the users from the GET request to the URL: /services/authentication/users?output_mode=json. It only returned part of the users. Without the role 'edit_license', I received the following error:

"messages": [ { "type": "ERROR", "text": "Unauthorized" } ]

What are the minimum permissions required to retrieve all users, and does anyone know if this is the same for Splunk Cloud?

 

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

maybe this hits your fingers? 

grantableRoles

This limits what you can see and set.

On cloud you cannot see all users as some of those are restricted for only Splunk's own use.

r. Ismo 

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...