Skip to main content
After you set up Splunk Agent Observability, you can add users and assign them roles to grant different levels of access within the organization. Access control varies depending on your deployment option. Select the tab for your deployment option to view the documentation.
The following sections apply to on-premises, standalone, and custom deployments of Splunk Agent Observability.

​
Org-level roles (On-premises)

You can assign users the following roles:
  • Admin: Full access to the organization, including viewing all projects.
  • Manager (enterprise only): Can add and remove users.
  • User: Can create, update, share, and delete projects and resources within projects.
  • Read-only: Cannot create, update, share, or delete any projects or resources. Limited to view-only permissions.
Free users of Splunk Agent Observability can only use the Admin, User, or Read-only roles. Contact us to explore a paid plan and get full RBAC.
In table form:

​
Evaluator access (On-premises)

An evaluator can be global (available in every project) or project-scoped (available only in projects it is shared with). A user’s project role determines their access to project-scoped evaluators.Org-level admins have full access to evaluators through their org-level role. Org-level managers and users get evaluator access only through their project roles.The following table describes evaluator access by project role:Additional considerations:
  • Read-only users can view evaluators and submit auto-tune feedback, regardless of their project role.
  • Project roles apply to the projects an evaluator is shared with. For example, an editor of Project A can edit an evaluator shared with Project A even if it is also shared with Project B, where they have no role.
  • Users see auto-tune feedback only from projects they can view. Only feedback from projects they own or edit is used when they apply auto-tune.

​
Add users to your organization (On-premises)

You must have the admin or manager role to add users to your organization.To send email invitations to users, follow these steps:
  1. Log into Splunk Agent Observability.
  2. Select your user profile in the upper-right corner. The user menu
  3. Select Users.
  4. Select Invite Users.
  5. Enter the emails of the users you want to invite and the role you want to assign to them. See Org-level roles for more information on roles.
  6. Select Invite.
Users receive an email from Splunk Agent Observability with a link to sign up. After you invite a user, their email appears in the Users list.

​
Assign roles to users (On-premises)

To assign a role to user who is already part of your organization, follow these steps:
  1. Log into Splunk Agent Observability.
  2. Select your user profile in the upper-right corner. The user menu
  3. Select Users.
  4. Search for the user’s email. In the row for the user, select their Role and choose a new role from the drop-down menu.

Access Control

Learn about access control and related features.