Splunk Enterprise

splunk - get all users

chen
Observer

I created a role with the capabilities 'edit_license' and 'edit_user', but I didn't receive all the users from the GET request to the URL: /services/authentication/users?output_mode=json. It only returned part of the users. Without the role 'edit_license', I received the following error:

"messages": [ { "type": "ERROR", "text": "Unauthorized" } ]

What are the minimum permissions required to retrieve all users, and does anyone know if this is the same for Splunk Cloud?

 

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

maybe this hits your fingers? 

grantableRoles

This limits what you can see and set.

On cloud you cannot see all users as some of those are restricted for only Splunk's own use.

r. Ismo 

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...