Objective 3.1

Cloud Certified Admin

Administer Splunk user roles

Objective 3.1 sits in User Authentication and Authorization, which carries 5% of the Cloud Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

3-1User Authentication and Authorization

A new analyst signs in to Splunk but cannot open the payment card index or the saved searches her team uses. What connects a user to the permissions they hold?

Capabilities aloneCapabilities are held by roles rather than by users directly.
AppsAn app scopes objects rather than granting permissions.
IndexesAn index is a store a role can be granted access to.
RolesCorrect · your answerCorrect.

Correct.

Checked against help.splunk.com, August 2026

Concept

Attaching permissions to a named set rather than to a person is what makes access reviewable. Removing an ability becomes a question of who holds which role.

Why D

Splunk states that roles let users perform actions, that you determine permissions and capabilities through the roles users hold, and that since users do not receive permissions directly, roles connect users to how they interact with the platform.

Source

When you configure role-based user access, you determine what permissions and capabilities that users have through the roles that they hold. Since users do not receive permissions and capabilities directly, roles connect users to how they interact with the Splunk platform.

Splunk Docs: About configuring role-based user access, checked August 2026
#roles#access

Now you: objective 3.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

3-1User Authentication and Authorization

An administrator wants to stop a user taking an action. What does Splunk say about roles?

Sample question 2 of 3

3-1User Authentication and Authorization

One team must reach the fraud index and a shared operations dashboard, while a second team reaches neither. Which platform resources can roles control access to?

Sample question 3 of 3

3-1User Authentication and Authorization

You have just enabled native Splunk authentication on a fresh deployment and have defined no roles of your own yet. Which roles are already available?

Full Cloud Certified Admin question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in User Authentication and Authorization