All Apps and Add-ons

VCuser permissions in Splunk VMware App

dshakespeare_sp
Splunk Employee
Splunk Employee

Do we have any information regarding what permission the vcuser account needs to have in Splunk VMWare app?

When granting the vcuser local admin rights (the one used in the engine.template file on the FA vm) everything works properly.

For security reasons customer wishes to revolke local admin rights and grant specific permissions to a user without elevated rights.

Are the permissions documented anywhere?

The document at http://docs.splunk.com/Documentation/VMW/latest/Install/CreatevCenterserviceaccount, but the page does not appear to explain this.

Customer can only get this to work when user has local admin rights.

Customer also like to know what exactly is checked with that script on the vcenter server with the vcuser.

Customer is also looking a description what correlation is between the vcenter server and the esxi hosts. Their understanding is the hosts use completely different credentials so even the vcenter server has some permission problem, the esxi hosts should send data.

0 Karma

bbingham
Builder

A full list of requirements for the virtual center user account can be found here:

http://docs.splunk.com/Documentation/VMW/latest/Install/CreatevCenterserviceaccounts

the link you supplied is missing an "s"

http://docs.splunk.com/Documentation/VMW/latest/Install/CreatevCenterserviceaccount

If there was a miss-print in our documentation, please let me know where it is located so we can get it fixed!

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...