I have the lookup editor deployed to my environment, and am finding that my users are not able to tweak the permissions of the lookups they created. Am I maybe missing a role?
Hi There,
As far as I'm aware adjusting the permissions of lookup's within the lookup editor app isn't a feature that exists, I find myself having into "Settings > Lookups > Lookup Table Files" to adjust the permissions where needed
I believe for a user to be able to adjust the permissions for their lookup it may require them to have write permissions for the particular app in question
Hi There,
As far as I'm aware adjusting the permissions of lookup's within the lookup editor app isn't a feature that exists, I find myself having into "Settings > Lookups > Lookup Table Files" to adjust the permissions where needed
I believe for a user to be able to adjust the permissions for their lookup it may require them to have write permissions for the particular app in question
In case you are looking to give write permissions to an app, here is what you are required to do:
Source: splunk docs
Steps
1 From the Splunk Home page, select any app in the Apps Panel to open the app.
2 Click on the Applications menu in the Splunk bar, and select Manage Apps.
3 Find the app that you want to adjust permissions for and open its Permissions settings.
4 On the Permissions page for the app, give the role Read and Write permissions.
5 Click Save to save your changes.
BTW: the Lookup Editor actually just redirects users to the built-in permission page. Thus, it is doing exactly what this answer suggests.
Hmm, so it looks like when i go to edit the permissions of a lookup through the "Lookup Table Files" page, the selections are all grayed out. Same behavior as when you try to do it through the Editor.
Interesting, what roles have your users been granted?
accelerate_search
change_own_password
edit_search_schedule_window
export_results_is_visible
extra_x509_validation
get_metadata
get_typeahead
input_file
list_inputs
output_file
pattern_detect
request_remote_tok
rest_apps_view
rest_properties_get
rest_properties_set
search
Do your users have write permissions for the app the lookup's are situated in?
omg. what a noob mistake. Good lord. THANKS
No worries, sometimes we all look so hard for the complicated issues that we miss the obvious ones, happy splunking!
Oh interesting, I'll see if I can have my users test out going through the settings page. Thanks for the tip. Will report back with an accepted answer after verifying.