Security

Feature Request: A Role Needs What Capability to Be Able To Create an App?

jchensor
Communicator

Hello, everyone.

I've already looked at the following link:

http://splunk-base.splunk.com/answers/13239/what-permscapabilities-needed-to-create-an-app

And the answer provided in there was "Only Admins can create apps."

I don't know, I just can't wrap my head around that. I feel like that can't be correct and that it's a mistake. I really want to give some users the ability to generate new apps and dashboards, but I don't want to make them admins of everything Splunk. It seems almost silly to me that you'd have to be an admin just to gain that ability. Plus, the documentation here:

http://docs.splunk.com/Documentation/Splunk/4.3.2/Developer/Step2BuildApp

...mentions nothing of a need to be an Admin, though obviously the documentation may have just missed it. Does anyone here know for certain that you have to be an Admin to create an App? I mean, the Admin itself is just another role with a bunch of extra capabilities. I can delete the role and modify it to my heart's content, so there's gotta be something that allows the Admin role to create Apps, not that it just happens to be a role named "Admin".

Thanks, everyone!

  • James

Lucas_K
Motivator

Surprised this isn't answered but the answer is that you simply need the "admin_all_objects" capability.

Nothing more. Nothing less.

You can try it yourself by adding ALL capabilities. You can create an app.
Try it again and remove ONLY admin_all_objects. You can't create an app.
Try again and remove everything but add admin_all_objects. You can create an app.

In your original question you wanted to give specific users the ability to create apps. This capability is very VERY dangerous in the wrong hands. We had a user that had it (it was a specific capability required in a specific data base app) they proceeded to remove/delete all configurations across the entire system as they didn't realise they weren't inside their own sandbox environment.

wilsonl
Engager

Jun/2012 and no answer...

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...