search to get an overview of all dashboards and apps with authorizations

[rrovers]

I have a search to get an overview of all users with their authorizations: roles, capabilities, indexes (search found somewhere else on this community).

I wonder if it is also possible to get an overview of the apps and dashboards with the coupled roles.

Does anyone know if this is possible and if so how to do it?

[rrovers · Accepted solution]

Hi @richgalloway, thanks, if I combine these 2 I get the result I want:

| rest /servicesNS/-/-/data/ui/views
| rename eai:acl.app AS app
| rename eai:acl.perms.write as dashboard-write-permission
| rename eai:acl.perms.read as dashboard-read-permission
| rename eai:appName as appName
| join type=outer appName
[| rest /servicesNS/-/-/apps/local
| rename title AS appName
| rename eai:acl.perms.read AS app-read-permission
| rename eai:acl.perms.write AS app-write-permission]
| table app label title dashboard-read-permission dashboard-read-permission app-write-permission app-read-permission

[splunkreal]

Hello,

at the end we would like put write instead of read 😉

| table app label title dashboard-read-permission dashboard-write-permission app-write-permission app-read-permission

[richgalloway]

This thread is more than 2 years old with an accepted solution so it's unlikely to get many more responses.  If it does not solve your problem then please post a new question.

[richgalloway]

If your problem is resolved, then please click the "Accept as Solution" button to help future readers.

[richgalloway]

You can get a list of apps and dashboards using REST commands, but it will come with user names rather than role names.  You'll have to correlate with your user list to get roles.

Try 

| rest /servicesNS/-/-/data/ui/views

| rest /servicesNS/-/-/apps/local