- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

the_wolverine
Champion
05-04-2016
08:01 AM
I want to create a standalone user role to access a single index for search only. I do not want to inherit any existing role.
What are the minimum capabilities required to do this?
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

the_wolverine
Champion
05-04-2016
08:28 AM
It looks like these are the minimum capabilities.
get_metadata = enabled
rest_properties_get = enabled
search = enabled
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

the_wolverine
Champion
05-04-2016
08:28 AM
It looks like these are the minimum capabilities.
get_metadata = enabled
rest_properties_get = enabled
search = enabled
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
w531t4
Path Finder
10-24-2017
07:38 PM
is this for web only, or api only?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

the_wolverine
Champion
02-02-2018
08:56 PM
This is web and api. There is currently no distinction between the two.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
acharlieh
Influencer
05-04-2016
08:06 AM
It's been a while since I've looked into things... but are you asking for members of this role to execute searches via the Splunk Web or the API only ?
