I want my users to be able to share content (e.g. Dashboards and field extractions) from the Search app to all other apps. These users have a limited set of capabilities, but have write permissions on the Search app and another app. However, under the "Edit Permissions" option, the "Display For": "All Apps" setting is greyed out:
The same root problem occurs with field extractions and similar configurations, where the option to select "All Apps" is not visible:
Does anyone have any advice or suggestions for me to try?
As commented by somesoni2, making an app or knowledge object available globally (All Apps) requires the admin_all_objects capability.
This is not very clear from the various Doc pages, so I've submitted a request to get this clarified on some pages.
For the curious, the links I referenced:
Users with write permissions on the app can promote an object to be available globally:
https://docs.splunk.com/Documentation/Splunk/6.3.1/Admin/Apparchitectureandobjectownership (under "Make Splunk knowledge objects globally available")
Managing permissions through the local.meta file: http://docs.splunk.com/Documentation/Splunk/6.3.1/Security/Addmanagementaccesstocustomroles
The very first line of your very first link here say "Note: This topic assumes that as a knowledge manager you have an admin role or a role with an equivalent permission set.". To be able to share an object globally, you need Admin_all_Objects capability.