All Apps and Add-ons

Splunk App for VMware 3.1.3: How to remove "admin_all_objects" from the VMware admin and still allow them to control the DCN's?

hartfoml
Motivator

I am new to the Splunk App for VMware.

I gave my VMWare admin the "splunk_vmware_admin" user role in Splunk.

He said that and now he can see all installed "Apps" and "Reports" that he didn't use to see.

How can I take away the "admin_all_objects" from the VMware admin and still allow them to control the DCN's?

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

$app$_admin roles are additive to Splunk's native admin roles -- you're stating "this is a Splunk admin who can also admin VMW", not "this is a Splunk user who admins the VMW app".

0 Karma

hartfoml
Motivator

My VMware admin is not a splunk admin. I want to delegate the VMWARE admin role to the VMware Admins and not have them admin all of splunk. Is this possible?

One of the Capabilities showing for the splunk_vmware_admin is admin_all_objects

This essentially gives the "VMWare Admin" the right to be a "Splunk Admin"

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...