Why are my users unable to change the permissions of a lookup?

[paimonsoror]

I have the lookup editor deployed to my environment, and am finding that my users are not able to tweak the permissions of the lookups they created. Am I maybe missing a role?

[paulbannister · Accepted solution]

Hi There,

As far as I'm aware adjusting the permissions of lookup's within the lookup editor app isn't a feature that exists, I find myself having into "Settings > Lookups > Lookup Table Files" to adjust the permissions where needed

I believe for a user to be able to adjust the permissions for their lookup it may require them to have write permissions for the particular app in question

[kbehl]

In case you are looking to give write permissions to an app, here is what you are required to do:
Source: splunk docs
Steps

1 From the Splunk Home page, select any app in the Apps Panel to open the app.
2 Click on the Applications menu in the Splunk bar, and select Manage Apps.
3 Find the app that you want to adjust permissions for and open its Permissions settings.
4 On the Permissions page for the app, give the role Read and Write permissions.
5 Click Save to save your changes.

[LukeMurphey]

BTW: the Lookup Editor actually just redirects users to the built-in permission page. Thus, it is doing exactly what this answer suggests.

[paimonsoror]

Hmm, so it looks like when i go to edit the permissions of a lookup through the "Lookup Table Files" page, the selections are all grayed out. Same behavior as when you try to do it through the Editor.

[paulbannister]

Interesting, what roles have your users been granted?

[paimonsoror]

accelerate_search
change_own_password
edit_search_schedule_window
export_results_is_visible
extra_x509_validation
get_metadata
get_typeahead
input_file
list_inputs
output_file
pattern_detect
request_remote_tok
rest_apps_view
rest_properties_get
rest_properties_set
search

[paulbannister]

Do your users have write permissions for the app the lookup's are situated in?

[paimonsoror]

omg. what a noob mistake. Good lord. THANKS

[paulbannister]

No worries, sometimes we all look so hard for the complicated issues that we miss the obvious ones, happy splunking!

[paimonsoror]

Oh interesting, I'll see if I can have my users test out going through the settings page. Thanks for the tip. Will report back with an accepted answer after verifying.