Getting Data In

What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

GauriSplunk
Path Finder

Hello,

I want to find if a role has any Read/Write permissions on any Splunk objects using REST API.
Which REST API call do I use?

I have created a role that has RW permission on some search/dashboard objects only. It does not have any permissions at app level.

I want to use a REST find to find which objects this role has permissions on. How do I do it?

thanks

0 Karma

duartet
Path Finder
0 Karma

javiergn
Super Champion

I don't have access to any Splunk instance at the moment but try the following:

| rest /services/authentication/users splunk_server=local 

It might not give you the level of detail you are looking for but it should be a start.

GauriSplunk
Path Finder

If a give a role permission on a splunk object , I see the entry in local.meta. but how do i get this information via a REST API call?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...