By default, which of the following capabilities are granted to the sc_admin role?
By default, the sc_admin role in Splunk Cloud is granted several important capabilities, including:
indexes_edit: The ability to create, edit, and manage indexes.
fsh_manage: Manage full-stack monitoring integrations.
admin_all_objects: Full administrative control over all objects in Splunk.
can_delete: The ability to delete events using the delete command.
Option C correctly lists these default capabilities for the sc_admin role.
Splunk Documentation Reference: User roles and capabilities
Armanda
2 days agoStephaine
4 days ago