I am facing two challenges with Splunk 7.2.0.
Users who have the "edit_user" capability are unable to set a users default app. Also I cannot find any suitable capability for this task. It seems that really powerful capabilities like "admin_all_objects" are necessary for this simple task. Could you tell me, which is a suitable capability for a user administrator who should create users and assign default apps only?
I cannot find out, how the inheritance of the default app from a role is supposed to work when using Splunk user administration. Upon creating a new user, it is always necessary to select at least one app. Even if the user is created by a user administrator that may not set a default app (see point 1), the app will be Launcher(Home) always. The inheritance seems to never have any effect when using the Splunk user administration as there is no "default" item to select nor can the field be left empty. How is this supposed to work? I cannot find an answer in the docs unfortunately.
Thank you for your help
... View more