Objective 5.1

Enterprise Certified Admin

Describe user roles in Splunk

Objective 5.1 sits in Splunk User Management, which carries 5% of the Enterprise Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

5-1Splunk User Management

An administrator asks how users get permissions in Splunk. What does Splunk say connects the two?

Capabilities aloneCapabilities are held by roles rather than assigned to users directly.
AppsAn app scopes objects rather than granting a user permissions.
IndexesAn index is a store that a role can be granted access to.
RolesCorrect · your answerCorrect.

Correct.

Checked against help.splunk.com, August 2026

Concept

Attaching permissions to a named set rather than to a person is what makes access reviewable. It also means removing an ability is a matter of who holds which role.

Why D

Splunk states that roles let users perform actions, that you determine what permissions and capabilities users have through the roles they hold, and that since users do not receive permissions directly, roles connect users to how they interact with the platform.

Source

When you configure role-based user access, you determine what permissions and capabilities that users have through the roles that they hold. Since users do not receive permissions and capabilities directly, roles connect users to how they interact with the Splunk platform.

Splunk Docs: About configuring role-based user access, checked August 2026
#roles#access

Now you: objective 5.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

5-1Splunk User Management

An administrator wants to stop a user performing an action they can currently take. What does Splunk say about roles?

Sample question 2 of 3

5-1Splunk User Management

An administrator asks what roles can control access to. Which does Splunk name?

Sample question 3 of 3

5-1Splunk User Management

An administrator asks what assigning a role to a user controls. Which does Splunk name?

Full Enterprise Certified Admin question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.