Splunk's user management is pretty limited. You are much better off using ldap to groups and tie those groups to roles with the desired privileges assigned. Then let folks manage their users via more traditional means such as Active Directory group membership in those mapped groups. Not touching Splunk themselves. ... View more