Necessary capabilities for uploading files to search head UI Settings > Add Data > Upload

Available Languages

Updated:September 29, 2026

Document ID:SPLK047176

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk Cloud Splunk Enterprise

Description

Users with role user and power assigned don't have sufficient authorization to upload files from Settings > Add Data > Upload.

Investigation

Created a user with a sc_admin role assigned. Reducing capabilities step by step to find the necessary capabilities that allow users to upload files via Settings > Add Data > Upload.

Resolution

Found below capabilities are required to upload files from Settings > Add Data > Upload.
```
edit_input_defaults
edit_tcp_stream
edit_upload_and_index
indexes_list_all
```
By any chance, if the user needs to edit indexes like creating a new index to store the data, then capability indexes_edit is aslo required.

Revision History

Revision	Publish Date	Comments
1.0	29-Sep-2026	Initial Release

Was this Document Helpful?

Feedback

Contact Cisco

Open a Support Case
(Requires a Cisco Service Contract)

This Document Applies to These Products

Splunk Cloud