Security

Make dbx app not visable to users but still visable to admins

hartfoml
Motivator

How can I take the DBX app out of the list of app for users but still leave it viable for admins

I can take permissions away from users for the dbx home view and that will keep them out of the app but it still shows up in the available app list for users.

I can tun of the "view this app" but this takes it out of the admins list of apps.

I can take permissions away from users for the app but then they can not see searches that were created in the app for the users.

Any suggestions?

Tags (2)
0 Karma
1 Solution

hartfoml
Motivator

If for example a search is using one of the db* commands, users are going to need those commands - and hence read permissions for the DBConnect app. If a search is merely using data indexed by DBConnect, there's no need to have read permissions for the app.

View solution in original post

hartfoml
Motivator

If for example a search is using one of the db* commands, users are going to need those commands - and hence read permissions for the DBConnect app. If a search is merely using data indexed by DBConnect, there's no need to have read permissions for the app.

hartfoml
Motivator

@sherm77 sorry to here your upset. @Martin_mueller has helped me with problems in the past and I usealy give half my points when i accept the answer. Sorry Martin g=for neglecting to recognize you some two years ago for this answer. Points to you Martin and sorry to upset you sherm.

0 Karma

sherm77
Path Finder

I'm not sure why you thought I was upset (?) or the length of time being a consideration, it's a matter-of-fact thing for me. Lots of folks on here taking what the smart people like @martin_mueller give and post as their own answer. I've known Martin for awhile and didn't like the idea of someone 'apparently' taking credit for his work/answers. I upvoted because Martin doesn't have a problem with it and it's a good answer. @hartfomi Have a happy week!

0 Karma

sherm77
Path Finder

I downvoted this post because this answer was given by @martin_mueller (shown above) and reposted by the @hartformi who asked the question & reposted martin's answer without attribution.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Chill 🙂

hartfoml
Motivator

This helps a lot. I am not putting the DB info into splunk and when the dashboard runes the data is puled from the DB so they will need access to the DBX app. thanks much.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

That depends on the search. If for example a search is using one of the db* commands, users are going to need those commands - and hence read permissions for the DBConnect app. If a search is merely using data indexed by DBConnect, there's no need to have read permissions for the app.

hartfoml
Motivator

If I move the search some-ware else what parts of the DBX app do the users need to have available to operate the search?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

I fear that's going to be tough. Have you considered moving the searches elsewhere?

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...