Adding such a macro is no problem at all, go to Settings -> Advanced Search -> Search Macros -> New, give it a name, and enter this as text: (index=new OR index=old) Then share this with the users that need it and teach them to use this in their search: `your_macro_name` ... View more

Thank you @skalliger!! I also dropped some feedback on https://docs.splunk.com/Documentation/Splunk/8.0.1/Knowledge/Defineatime-basedlookupinSplunkWeb so hopefully that will help as well. ... View more

You can't define permissions on a role object. If you could, any non-admin user capable of editing a role would have the ability to effectively become admin by adding capabilities to that role... ... View more