How do I grant access to the Edit Account screen for a new role?

[mark_fendly]

I've created a new role in the web interface and want users assigned to that role to be able to change their own passwords. I gave the role the change_own_password capability, but when the user signs in and clicks their name, and then Edit Account, they get an error. I don't see any other capabilities that sound like they grant access to that screen. Is there some setting that I'm missing?

[rsennett_splunk · Accepted solution]

I'm not sure what it would be that would combine with change_own_password, but you may want to allow that role to inherit the capabilities of the lowliest user, the user role.

If there is something in the user role that offends... create a new role say my_user, with all the capability of the user role and inherit it from your new role. Then go back and remove things one by one from your my_user if they offend... checking to be sure that your new role still can edit their own account info.

[mark_fendly]

I added all of the capabilities from the user role and then removed them one by one. It looks like in addition to change_own_password I also needed both list_inputs and rest_properties_get before it would allow me to access the Edit Account screen.

[rsennett_splunk]

Ah... yes. rest_properties_get is most likely how Splunk brings back/accesses the account info... glad you got it to work.