Skip to main content
Splunk Agent Observability supports role-based access control (RBAC) for granting users different levels of access to the system. Access control settings and features vary depending on your deployment type. Select the tab for your deployment type below to view the documentation.
The following sections only apply to on-premises, standalone, and custom deployments of Splunk Agent Observability.

​
System-level roles (On-premises)

You can assign users the following roles:
  • Admin: Full access to the organization, including viewing all projects.
  • Manager (enterprise only): Can add and remove users.
  • User: Can create, update, share, and delete projects and resources within projects.
  • Read-only: Cannot create, update, share, or delete any projects or resources. Limited to view-only permissions.
Free users of Splunk Agent Observability can only use the Admin, User, or Read-only roles. Contact us to explore a paid plan and get full RBAC.
In table form:When you invite a user to Splunk Agent Observability, a panel displays with options to set the system-level roles for the user.

​
Groups (On-premises, enterprise only)

Users can be organized into groups to streamline sharing projects. Currently, groups are only available to customers on paid plans of Splunk Agent Observability.There are 3 types of groups:
  • Public: Group and members are visible to everyone in the organization. Anyone can join.
  • Private: Group is visible to everyone in the organization. Members are kept private. Access is granted by a group maintainer.
  • Hidden: Group and its members are hidden from non-members in the organization. Access is granted by a group maintainer.
Within a group, each member has a group role:
  • Maintainer: Can add and remove members.
  • Member: Can view other members and shared projects.

​
Project sharing (On-premises)

By default, only a project’s creator (and managers and admins) have access to a project. Projects can be shared both with individual users and entire groups. Together, these are called collaborators.To share a project with collaborators, select your project from the main menu. From the project homepage, select Share project.Share a project within Splunk Agent Observability