Security

Automatic Role Removal

IRHM73
Motivator

Hi,

I wonder if someone can help me please.

We allocate user roles via the authroize.conf file with all the settings needed for each role.

By default, we don't allocate the 'export' function, but where appropriate will allocate in specific circumstances nornmally for a limited time frame.

Could someone tell me please, is there any funtionality within Splunk that allows a role, in this case the 'Export' function, to be removed from a user after a given timeframe has passed?

Many thanks and kind regards

Chris

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi IRHM73,

Not to my knowing, but that said does not mean you could create a cron job that modifies the setting for you in authorize.conf and reloads the new config.

Hope that helps ...

cheers, MuS

View solution in original post

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi IRHM73,

Not to my knowing, but that said does not mean you could create a cron job that modifies the setting for you in authorize.conf and reloads the new config.

Hope that helps ...

cheers, MuS

0 Karma

IRHM73
Motivator

Hi @MuS. Thank you for taking the time to come back to me and for your suggestion.

Not thought of that.

Many thanks and kind regards

Chris

0 Karma

MuS
SplunkTrust
SplunkTrust

You are welcome!

Sometimes you have to think out of the box to get where you want to be 😉

Feel free to accept this answer and help others 🙂

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...