Where to enable the "dbx_capable" capability in Splunk DB Connect?

[OCIEL]

I have a Prod and Non-Prod instances of Splunk running. A former admin installed DBX in both. In trying to setup the same users/access controls from Non-Prod to Prod, I am seeing a 'dbx_user' role with the 'dbx_capable' capability in my Non-Prod instance, but nothing like that in my Prod instance. Only admins have access to DB Connect in Prod.

Of course I can add any user/roles i want, but I believe I need to enable this capability or it wont get me anywhere. I'm trying to find where to do this, but not having much luck in reviewing the UI or the CLI, or finding the answer on Splunk.com.

I hope someone has had this issue if not suggestions are welcome.

Thanks

[OCIEL · Accepted solution]

I found it was a problem with the DB Connect version (older) in our PROD environment. Capability there after upgrade. Sorry for the late follow-up on this.

[jcoates_splunk]

hi, this is done through splunk's settings, under Access Controls, Roles