Which capability allows a power user to view a list of all users?

[mhale1982]

The list of capabilities doesn't explicitly list this.

I want a particular power user to be able to use the rest API and see a result of all users, not simply themselves. They have the ability to execute REST already, but they only ever see their own user account when running this command:

| rest /services/authentication/users splunk_server=local | table realname

[manjunathmeti]

Capability: edit_user

• Lets a user create, edit, or remove other users.
• Also lets a user manage certificates for distributed search.
• A role with the edit_user capability can assign any role to other users.
• To limit this ability, assign the 'edit_roles_grantable' capability and configure the 'grantableRoles' setting in authorize.conf.
  • Example: grantableRoles = role1;role2;role3