Security

Make dbx app not visable to users but still visable to admins

hartfoml
Motivator

How can I take the DBX app out of the list of app for users but still leave it viable for admins

I can take permissions away from users for the dbx home view and that will keep them out of the app but it still shows up in the available app list for users.

I can tun of the "view this app" but this takes it out of the admins list of apps.

I can take permissions away from users for the app but then they can not see searches that were created in the app for the users.

Any suggestions?

Tags (2)
0 Karma
1 Solution

hartfoml
Motivator

If for example a search is using one of the db* commands, users are going to need those commands - and hence read permissions for the DBConnect app. If a search is merely using data indexed by DBConnect, there's no need to have read permissions for the app.

View solution in original post

hartfoml
Motivator

If for example a search is using one of the db* commands, users are going to need those commands - and hence read permissions for the DBConnect app. If a search is merely using data indexed by DBConnect, there's no need to have read permissions for the app.

hartfoml
Motivator

@sherm77 sorry to here your upset. @Martin_mueller has helped me with problems in the past and I usealy give half my points when i accept the answer. Sorry Martin g=for neglecting to recognize you some two years ago for this answer. Points to you Martin and sorry to upset you sherm.

0 Karma

sherm77
Path Finder

I'm not sure why you thought I was upset (?) or the length of time being a consideration, it's a matter-of-fact thing for me. Lots of folks on here taking what the smart people like @martin_mueller give and post as their own answer. I've known Martin for awhile and didn't like the idea of someone 'apparently' taking credit for his work/answers. I upvoted because Martin doesn't have a problem with it and it's a good answer. @hartfomi Have a happy week!

0 Karma

sherm77
Path Finder

I downvoted this post because this answer was given by @martin_mueller (shown above) and reposted by the @hartformi who asked the question & reposted martin's answer without attribution.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Chill 🙂

hartfoml
Motivator

This helps a lot. I am not putting the DB info into splunk and when the dashboard runes the data is puled from the DB so they will need access to the DBX app. thanks much.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

That depends on the search. If for example a search is using one of the db* commands, users are going to need those commands - and hence read permissions for the DBConnect app. If a search is merely using data indexed by DBConnect, there's no need to have read permissions for the app.

hartfoml
Motivator

If I move the search some-ware else what parts of the DBX app do the users need to have available to operate the search?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

I fear that's going to be tough. Have you considered moving the searches elsewhere?

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...