> For the complete documentation index, see [llms.txt](https://public-docs.anvilogic.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://public-docs.anvilogic.com/get-started/onboarding-guide/select-your-data-repository-and-get-data-in/integrate-splunk-as-your-data-repository/assign-the-avl_admin-role.md). # Assign the avl\_admin role Use Splunk Web to assign the avl\_admin role to app administrators. See [Create and manage roles with Splunk Web](https://docs.splunk.com/Documentation/Splunk/latest/Security/Addandeditroles) in the *Securing Splunk Enterprise* manual for instructions. {% hint style="info" %} Assign desired roles directly to each user. Don't inherit user roles through another role. {% endhint %} ## Customize roles The following roles are available on the Anvilogic App for Splunk. See [Summary of roles and privileges](https://kevin-hwang.gitbook.io/welcome-to-anvilogic/overview/onboarding-guide/select-your-data-repository-and-get-data-in/integrate-splunk-as-your-data-repository/assign-the-avl_admin-role#summary-of-roles-and-privileges) to see a summary of the privileges provided by each role. * avl\_admin * avl\_senior\_developer * avl\_developer * avl\_senior\_triage * avl\_triage * avl\_readonly You can customize the avl\_senior\_developer, avl\_developer, avl\_senior\_triage, `and` avl\_triage roles. The avl\_admin and avl\_readonly roles can't be modified. For example, perform the following tasks to customize the capabilities allowed or restricted by the AVL Senior Developer role: 1. In the Anvilogic App for Splunk, select **Settings > App Configuration**. 2. Click **User Settings** to expand the section. 3. Click **Customize AVL Senior Developer Role** to expand the section for that role. 4. Deselect any capabilities you want to remove for this role, or select a capability to add it to the role. 5. Click **Save**. ## Summary of roles and privileges The following table lists the roles in the Anvilogic App for Splunk and the privileges granted by each role. You can customize the privileges enabled for each role as desired.
PrivilegeAVL Senior DeveloperAVL DeveloperAVL Senior TriageAVL Triage
Allowlist privileges
avl_add_al_rule_entry✓✓✓✓
avl_remove_al_rule_entry✓✓✓
avl_modify_al_rule_entry✓✓✓✓
avl_add_al_global_entry✓✓✓
avl_remove_al_global_entry✓✓✓
avl_modify_al_global_entry✓✓✓
avl_manage_rule_al✓✓✓
avl_manage_global_al✓✓✓
Triage privileges
avl_change_first_alert_status✓
avl_change_all_alert_status✓✓✓
avl_change_alert_status_to_new✓✓✓
avl_bulk_alert_status✓✓✓
avl_add_observation✓✓✓✓
avl_remove_observation✓✓✓
avl_rate_rule✓✓✓✓
avl_add_rule_feedback✓✓✓✓
avl_create_case✓✓✓✓
avl_suppress_alert✓✓✓✓
avl_suppress_global_alert✓✓✓✓
Content deployment privileges
avl_deploy_content✓
avl_write_hec✓✓✓
avl_post_rest_platform✓✓
avl_post_rest✓✓✓
avl_get_rest✓✓✓✓
avl_rest_config_access_get✓✓✓✓
avl_rest_config_access_post
## Next step [Configure the HEC collector commands](/get-started/onboarding-guide/select-your-data-repository-and-get-data-in/integrate-splunk-as-your-data-repository/configure-the-hec-collector-commands.md). [^1]: Add an entry to a rule allow list. [^2]: Remove an entry in a rule allow list. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://public-docs.anvilogic.com/get-started/onboarding-guide/select-your-data-repository-and-get-data-in/integrate-splunk-as-your-data-repository/assign-the-avl_admin-role.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.