Roles and Permissions
Compliance Essentials uses Splunk permissions and app-managed boundary permissions.
System Boundary Permissions
System boundaries can have admin permissions assigned to users or roles. Boundary admin access controls sensitive actions such as deleting a system boundary.
Recommended Access Model
- App administrators manage setup, frameworks, system boundaries, baseline configuration, saved search configuration, and settings.
- Compliance users manage assessments, evidence, artifacts, control gaps, and POA&M items.
- Read-only users review posture, evidence runs, and reports.
Current User
Several workflows use the current Splunk user to record ownership or activity, including:
- Artifact creation
- Discussion comments
- Audit activity
- Assessment updates
- Control gap discussion