demo-SA-UserAccess

The Supporting Add-on for providing Access Control support to apps is a foundational component that enables programmatic access control and user role management for other Splunk applications. This add-on provides a REST API interface and KV store collections that allow dependent apps to implement fine-grained permission systems without building their own access control infrastructure. It maintains two primary KV store collections—app_capabilities and app_acl—that store capability definitions and access control lists. Apps that depend on SA-UserAccess can query and update these collections through REST endpoints to enforce role-based access controls, manage user permissions, and validate capabilities at runtime. The add-on operates transparently in the background, requiring no direct user interaction, and serves as shared infrastructure for access control across multiple Splunk apps in an environment.