Security

What capability gives users permissions to edit custom alert actions?

responsys_cm
Builder

I have a customer that needs a group of non-Splunk admin users to be able to create and manage custom alert actions. I don't see any capabilities specific to that function.

Is there a way to give them access to that without granting them admin all objects?

Thx.

0 Karma

p_gurav
Champion

Hi,

Can you try giving below capability to user instead of admin all objects:

edit_tcp
list_settings
schedule_search

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...