Objective 5.1

Enterprise Certified Admin

Describe user roles in Splunk

Objective 5.1 sits in Splunk User Management, which carries 5% of the Enterprise Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

5-1Splunk User Management

A user in your deployment cannot open a dashboard, and you notice permissions are never granted to people directly in Splunk. Which object connects a user to permissions and capabilities?

Capabilities aloneCapabilities are held by roles rather than assigned to users directly.
AppsAn app scopes objects rather than granting a user permissions.
IndexesAn index is a store that a role can be granted access to.
RolesCorrect · your answerCorrect.

Correct.

Checked against help.splunk.com, August 2026

Concept

Attaching permissions to a named set rather than to a person is what makes access reviewable. It also means removing an ability is a matter of who holds which role.

Why D

Splunk states that roles let users perform actions, that you determine what permissions and capabilities users have through the roles they hold, and that since users do not receive permissions directly, roles connect users to how they interact with the platform.

Source

When you configure role-based user access, you determine what permissions and capabilities that users have through the roles that they hold. Since users do not receive permissions and capabilities directly, roles connect users to how they interact with the Splunk platform.

Splunk Docs: About configuring role-based user access, checked August 2026
#roles#access

Now you: objective 5.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

5-1Splunk User Management

An administrator wants to stop a user performing an action they can currently take. What does Splunk say about roles?

Sample question 2 of 3

5-1Splunk User Management

Your security team must not reach the payroll index or the finance dashboards, though they need everything else. Which platform resources can roles control access to?

Sample question 3 of 3

5-1Splunk User Management

You assign the power role to an analyst on Monday. That single assignment governs three things about how far she can go in the platform. Which three does it control?

Full Enterprise Certified Admin question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.