All Apps and Add-ons

how do i create an app and make someone else the owner?

a212830
Champion

Hi,

We don't let users create apps on our search-heads. I was wondering if there was a way for me to create an app and then make someone else (and individual) the owner of that app. Curious as to how people handle this process...

Using Splunk 6...

Tags (2)
0 Karma
1 Solution

somesoni2
SplunkTrust
SplunkTrust

The apps do not have property called owner. I would follow following to handle access to apps.

  1. Create a role for the user and give appropriate access to this role (may be inherit power role and give other access items)
  2. Assign this role to the respective user.
  3. Create the app with admin credential
  4. Change the sharing permission for the app to give write access to the new role created in step 1 for this app.

Here are the steps for Changing permission.

For app level permission, you will find "[]" in the etc/apps//metadata/default.meta. If updating the permission from filesystem.

[]
access = read : [ * ], write : [ admin, power, <add your role> ] 

View solution in original post

somesoni2
SplunkTrust
SplunkTrust

The apps do not have property called owner. I would follow following to handle access to apps.

  1. Create a role for the user and give appropriate access to this role (may be inherit power role and give other access items)
  2. Assign this role to the respective user.
  3. Create the app with admin credential
  4. Change the sharing permission for the app to give write access to the new role created in step 1 for this app.

Here are the steps for Changing permission.

For app level permission, you will find "[]" in the etc/apps//metadata/default.meta. If updating the permission from filesystem.

[]
access = read : [ * ], write : [ admin, power, <add your role> ] 

sowings
Splunk Employee
Splunk Employee

That being said, the metadata files (default.meta for shipping values, local.meta for overrides or locally created content) do have an "owner" key=value pair for objects that get created. You can edit this directly, and restart the search head to "change owner". It's a bit kludgy, and is not usually necessary, however, given that you can adjust permissions as discussed above.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...