Configure permissions for Splunk App for Edge Hub
You can configure permissions with role-based access controls (RBAC). RBAC configuration for Splunk Edge Hub OS requires the following minimum versions:
- Splunk App for Edge Hub version 4.5.0
- Splunk Edge Hub OS version 1.7.0
- Splunk Edge Mobile version 1.9.0
After updating the Splunk Edge Hub products to the minimum versions for this feature, users without the admin or sc_admin role will require the following capabilities or roles to perform tasks for the Splunk Edge Hub.
See the following documentation to learn how to manage roles and capabilities for your Splunk platform:
- Manage users, roles, and capabilities in Splunk Cloud Platform in the Splunk Cloud Platform Admin Config Service Manual.
- Create and manage roles with Splunk Web in the Securing Splunk Enterprise manual.
Splunk Edge Hub OS roles
The Splunk App for Edge Hub adds the following capabilities to the admin and sc_admin roles:
Role | Description | Capabilities |
---|---|---|
edge_hub_admin | Assign this role to a user to grant them all capabilities, if they do not already have the admin or sc_admin role. |
|
edge_hub_viewer | This role grants users read-only capabilities. Users with this role can view the Splunk App for Edge Hub settings page, registered Splunk Edge Hub devices, and the Splunk Edge Hub device settings. Users with this role are not able to register Splunk Edge Hub devices. |
|
edge_hub_deployer | This role grants users the capabilities necessary to register and update a Splunk Edge Hub device. This role uses an access token from its user to perform any actions in the Splunk App for Edge Hub and AR. |
|
Splunk Edge Hub OS capabilities
Splunk Edge Hub OS has the following defined capabilities:
Capability | Description |
---|---|
edge_view_hubs |
Users with this capability can do the following:
This role cannot request to initiate software updates. |
edge_update_hubs |
Users with this capability can do the following:
|
edge_request_hub_update | Users with this capability are able to request a software update for a Splunk Edge Hub device when there is an update available. |
edge_view_hec_settings | Users with this capability can view the HTTP Event Collector (HEC) and index configuration in the Splunk App for Edge Hub Edge Settings page. |
edge_update_hec_settings | Users with this capability modify HTTP Event Collector (HEC) and index configuration in the Splunk App for Edge Hub Settings page. |
edge_register_hub |
Users with this capability can register new Splunk Edge Hub devices. A role with just the edge_register_hub capability is not sufficient to complete registration. However, a role that has the same capabilities as the edge_hub_deployer role can complete registration. |
Next step
Register your Splunk Edge Hub device. During registration, you'll also configure the indexes and event collector token you've created. See Register your Splunk Edge Hub device in the Splunk Edge Hub Setup and Configuration Guide.
For an overview of installation and configuration steps, see Installation and configuration overview for Splunk Edge Hub OS in the Splunk Edge Hub OS Setup and Configuration Guide.
Install the Splunk App for Edge Hub for Splunk Edge Hub OS | Register Splunk Edge Hub device |
This documentation applies to the following versions of Splunk® App for Edge Hub and Augmented Reality: 4.5.0, 4.6.0, 4.7.1, 4.8.0
Feedback submitted, thanks!