Configure permissions for Splunk OT Intelligence app

You can configure permissions with role-based access controls (RBAC). RBAC configuration for Splunk Edge Hub OS requires the following minimum versions:

• Splunk OT Intelligence version 4.5.0
• Splunk Edge Hub OS version 1.7.0
• Splunk Edge Mobile version 1.9.0

After updating the Splunk Edge Hub products to the minimum versions for this feature, users without the admin or sc_admin role will require the following capabilities or roles to perform tasks for the Splunk Edge Hub.

See the following documentation to learn how to manage roles and capabilities for your Splunk platform:

• Manage users, roles, and capabilities in Splunk Cloud Platform in the Splunk Cloud Platform Admin Config Service Manual.
• Create and manage roles with Splunk Web in the Securing Splunk Enterprise manual.

Splunk Edge Hub OS roles

The Splunk OT Intelligence adds the following capabilities to the admin and sc_admin roles:

Role	Description	Capabilities
edge_hub_admin	Assign this role to a user to grant them all capabilities, if they do not already have the admin or sc_admin role.	All Splunk Edge Hub capabilities edit_token_http list_token_http
edge_hub_viewer	This role grants users read-only capabilities. Users with this role can view the Splunk OT Intelligence settings page, registered Splunk Edge Hub devices, and the Splunk Edge Hub device settings. Users with this role are not able to register Splunk Edge Hub devices.	edge_view_hubs edge_view_hec_settings
edge_hub_deployer	This role grants users the capabilities necessary to register and update a Splunk Edge Hub device. This role uses an access token from its user to perform any actions in the Splunk OT Intelligence.	edge_view_hubs edge_update_hubs edge_register_hub edge_request_hub_update edit_token_http list_token_http

Splunk Edge Hub OS capabilities

Splunk Edge Hub OS has the following defined capabilities:

Capability	Description
edge_view_hubs	Users with this capability can do the following: View the list of registered Splunk Edge Hub devices in the Splunk Edge mobile app. View the following settings for a selected Splunk Edge Hub device: Splunk Edge Hub device name Screensaver time Language setting Whether a sensor is turned on or off Whether anomaly detection is turned on or off for a particular sensor What the sample rate is for a particular sensor This role cannot request to initiate software updates.
edge_update_hubs	Users with this capability can do the following: Modify the following Splunk Edge Hub settings using the Splunk Edge mobile app: Splunk Edge Hub device name Screensaver time Language setting Whether a sensor is turned on or off Whether anomaly detection is turned on or off for a particular sensor What the sample rate is for a particular sensor
edge_request_hub_update	Users with this capability are able to request a software update for a Splunk Edge Hub device when there is an update available.
edge_view_hec_settings	Users with this capability can view the HTTP Event Collector (HEC) and index configuration in the Splunk OT Intelligence Edge Settings page.
edge_update_hec_settings	Users with this capability modify HTTP Event Collector (HEC) and index configuration in the Splunk OT Intelligence Settings page.
edge_register_hub	Users with this capability can register new Splunk Edge Hub devices. A role with just the edge_register_hub capability is not sufficient to complete registration. However, a role that has the same capabilities as the edge_hub_deployer role can complete registration.

Next step

Register your Splunk Edge Hub device. During registration, you'll also configure the indexes and event collector token you've created. See Register your Splunk Edge Hub device in the Splunk Edge Hub Setup and Configuration Guide.

For an overview of installation and configuration steps, see Installation and configuration overview for Splunk Edge Hub OS in the Splunk Edge Hub OS Setup and Configuration Guide.