Docs » Create and manage teams in Splunk Observability Cloud » Manage teams in Splunk Observability Cloud

Manage teams in Splunk Observability Cloud 🔗

Managing teams in Splunk Observability Cloud means creating and deleting teams, as well as managing membership and team security.

Create a team 🔗

To create a team, you must be a Splunk Observability Cloud administrator.

To create a team, follow these steps:

  1. Log in to Splunk Observability Cloud.

  2. In the left navigation menu, select Settings > Teams.

  3. Select Create New Team.

  4. In the Team name dialog box, enter a name for the team.

  5. (Optional) In the Description field, enter a description of the team.

  6. From the Add Users list, you can search for users with the search text box.

  7. Continue to add users to the team.

  8. When you’re finished adding users, click Create. The new team name appears in the list of teams.

Delete a team 🔗

To delete a team, you must be a Splunk Observability Cloud administrator.

To delete a team, follow these steps:

  1. Log in to Splunk Observability Cloud.

  2. In the left navigation menu, select Settings > Teams.

  3. A table of current teams appears in the main panel.

  4. Find the name of the team.

  5. Select the Actions menu icon next the team name, then select Delete Team.

  6. Observability Cloud displays a dialog box that asks you to confirm the deletion. Click Delete.

The team no longer appears in the list of teams.

Change team name 🔗

To learn which roles can change the name of a team, see Team roles and permissions.

To change the team name, follow these steps:

  1. Log in to Splunk Observability Cloud.

  2. In the left navigation menu, select Settings > Teams.

  3. A table of current teams appears in the main panel.

  4. Find the name of the team and select the team.

  5. Select the Edit icon next the team name.

  6. When you’re finished editing the name, click Enter to save your changes.

Note

The Team name is case-insensitive. If you attempt to change the team name from Team to team, you will see a message that the name already exists.

The team now appears with the name you changed it to.

Add team members 🔗

For the roles that can add and remove team members, see Team roles and permissions.

To add or remove team members, follow these steps:

  1. Log in to Splunk Observability Cloud.

  2. In the left navigation menu, select Settings > Teams.

  3. A table of current teams appears in the main panel.

  4. Find the name of the team.

  5. Select the Actions menu (⋯) next to the team name and select Add users.

  6. Use the Add Users field to search for users by name or email to add them to the team.

    • To add a team member, click the checkbox next to the email address of the member.

  7. Select Add.

Remove team members 🔗

For the roles that can add and remove team members, see Team roles and permissions.

To remove team members, follow these steps:

  1. Log in to Splunk Observability Cloud.

  2. In the left navigation menu, select Settings > Teams.

  3. A table of current teams appears in the main panel.

  4. Find the name of the team whose member list you want to edit.

  5. On the Users tab, click the Actions menu (⋯) next to the name of the user you want to remove from the team.

  6. Select Remove from team

View a user’s team membership 🔗

You can search by a user’s name to view a list of the teams to which they belong.

To view which teams a user belongs to, follow these steps:

  1. Log in to Splunk Observability Cloud.

  2. In the left navigation menu, select Settings > Teams.

  3. A table of current teams appears in the main panel.

  4. In the search bar, enter the name of the user and ensure that Users is selected. You can search by the user’s name or email address.

Enable enhanced team security 🔗


Available in Enterprise Edition


By default, every user can join any team in your organization. If you want to restrict users from being able to join any team, you can turn on the enhanced team security setting. Turning on the enhanced team security setting also makes the Team Manager role available to teams.

To learn more about team roles and permissions, see Team roles and permissions.

You must be a Splunk Observability Cloud administrator to apply this setting. This setting applies to every team in your organization.

To turn on the enhanced team security setting, follow these steps:

  1. Log in to Splunk Observability Cloud.

  2. In the left navigation menu, select Settings > General Settings.

  3. Select the Restrict Access check box.

Team roles and permissions 🔗

This table presents the available team roles and their permissions. Some team roles and permissions change based on whether enhanced team security is turned on. For example, when you turn on enhanced team security, the Team Manager role is available, and Observability Cloud administrators or Team Managers must add users.

To learn more about enabling enhanced team security, see Enable enhanced team security.

Permission

Admin

Team Manager (Available with enhanced team security turned on)

Team Member

User

Create team

Yes

No

No

No

Delete team

Yes

No

No

No

View team landing page

Yes

Yes

Yes

Yes

Edit team name and description

Yes

Yes

  • Yes, when enhanced team security is turned off

  • No, when enhanced team security is turned on

No

Join team

Yes

Not applicable: A Team Manager doesn’t join a team. Only an existing Team Member can be assigned this role.

Not applicable: A Team Member is already on a team and doesn’t need to join.

  • Yes, when enhanced team security is disabled

  • No, when enhanced team security is turned on. A user must be added by an Admin or Team Manager

Add member

Yes

Yes

No

No

Assign Team Manager role to Team Member

  • Not applicable, when enhanced team security is disabled. The Team Manager role isn’t available when enhanced team security is disabled

  • Yes, when enhanced team security is turned on

Yes

  • Not applicable, when enhanced team security is disabled. The Team Manager role isn’t available when enhanced team security is disabled

  • No, when enhanced team security is turned on

  • Not applicable, when enhanced team security is disabled. The Team Manager role isn’t available when enhanced team security is disabled

  • No, when enhanced team security is turned on

Remove member

Yes

Yes

No

No

Edit notification policy

Yes

Yes

Yes

No

Leave team

  • Yes, if on a team

  • Not applicable, if not on a team

Yes

Yes

Not applicable: A user must be on a team to leave a team

Permission to link a detector to a team is based on the detector’s permissions. For example, if the user has write permission for a detector, they can link it to a team. To learn more, see View and manage permissions for detectors.

Permission to link a dashboard group to a team is based on the dashboard group’s permissions. For example, if the user has write permission for a dashboard group, they can link it to a team. To learn more, see Specify who can see and edit your dashboard groups and dashboards.