Security

Can a regular User promote views/dashboards to be app-level visible?

mctester
Communicator

According to http://www.splunk.com/base/Documentation/4.1.4/Admin/Apparchitectureandobjectownership

it sounds like if a user has the ability to promote saved searches and other objects to the App level, they should be able to promote all objects on that list, including dashboards/views.

I'm currently building some dashboards under 4.1.3 as a regular user. I was able to save searches and search macros and then set them to be App-visible.

When I created a view and try to promote it, I get a red error bar: Splunk could not update permissions for resource data/ui/views Client is not authorized to perform requested action

Bug, misconfiguration, or misunderstanding?

Tags (2)

Mick
Splunk Employee
Splunk Employee

It depends on the app-specific permissons, which are controlled by $SPLUNK_HOME/etc/apps/<app_name>/metadata/default.meta

For example, in the search app, only admin users have write permissions for views -

### VIEWS

[views]
access = read : [ * ], write : [ admin ]

If you change the permissions so that the user role has write-access, then you should be able to promote your views.

Chubbybunny
Splunk Employee
Splunk Employee

+1 vote Mick

0 Karma

Mick
Splunk Employee
Splunk Employee

If you don't vote up my answer, nobody knows how smart I am. Click the "up" arrow if you find the answer useful people!

Jason
Motivator

Wow, smart guy, that Mick.

0 Karma

Jason
Motivator

It's 4.1.3 on solaris, for the record.

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...