Security

Why are app icons only visible to users with the admin role?

pasokkum
Path Finder

Hi Team,

When I log in to Splunk Web as a non admin userm I am not able to see the app Icon image. When I log in as an admin, I am able to see all Apps having the required icons. Please let me know if there is any changes or settings that is required to be made.

Error when I inspect element is:

GET https://awsananva1069.jnj.com:8000/en-                     :8000/en-US/splunkd/__raw/servicesNS/test_ca/sos/static/appIcon.png:1 GET https://awsananva1069.jnj.com:8000/en-US/splunkd/__raw/servicesNS/test_ca/sos/static/appIcon.png 403 (Forbidden)

Thanks,
Soumya

1 Solution

manjunathmeti
Champion

You need to add these two capabilities to roles

  1. rest_apps_view
  2. rest_properties_get

One lists the properties of the apps and other gets the information from the listed properties.

You can refer this doc for more information http://docs.splunk.com/Documentation/Splunk/6.3.1511/Security/Rolesandcapabilities

View solution in original post

manjunathmeti
Champion

You need to add these two capabilities to roles

  1. rest_apps_view
  2. rest_properties_get

One lists the properties of the apps and other gets the information from the listed properties.

You can refer this doc for more information http://docs.splunk.com/Documentation/Splunk/6.3.1511/Security/Rolesandcapabilities

pasokkum
Path Finder

After adding user role to all the users the issue got resolved.

0 Karma

woodcock
Esteemed Legend

It is worse than that. Sometimes you get icons and sometimes you don't and I cannot figure out any rhyme or reason for it but the inconsistency of visibility of icons is baffling and it has always been an irritation to me and I have never been able to pin it down but TRUST ME. Admin users can have missing icons sometimes, too.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...