Datamodel search permissions

[mmoermans]

The following search : | tstats summariesonly=t count from datamodel=Network_Traffic

Results in no results, even when giving the user permissions to all indexes. The only way to give results is to add the "User" role.
Why can't I give a custom role access to search this datamodel? The datamodel is global and so is the CIM app so I am confused why this doesn't work.

[koshyk]

user role normally have around 16-17 capabilities attached to it.
My suggestion is you to create something like
- create new role my_user_role
- inherit all capabilities as per user at the start
- detach one by one from my_user_role
- See which is the least possible option to grant you that search (my assumption is search capability only, but not sure)