SPLK-1003 › User And Authentication Management
This domain covers how Splunk Enterprise authenticates users and authorizes access through roles. It tests LDAP, SAML, local accounts, role inheritance, index permissions, and the authentication.conf and authorize.conf files. Expect scenario questions about group-to-role mapping, break-glass accounts, and resolving conflicting index access from multiple roles.
SPLK-1003 User And Authentication Management — All 63 Questions
Every question in this domain with answers and detailed explanations.