Did you want to allow a user to see everything in CMC (e.g. data for other users?) I will let the CMC team answer the roles question, but many of the searches used in CMC currently require access. to the ~ internal ~ indexes (e.g. _audit) so users would need to have access to that data for all users, just something to keep in mind.  Would something like this work? https://ideas.splunk.com/ideas/EID-I-36 the idea proposed is having the ability for users to see their own data, but not others.  Then CMC could be written that users get access to the data that is relevant to themselves.  ... View more