Roles in Splunk

There are 3 different roles in Splunk in order it is Users, Power User & Admin.

1) User : This is the lowest role in Splunk. Here you can create your saved searches, run your saved searched and save it. You cannot publish it for entire audience.

2) Power User : This role can create, edit and save all saved searched. You can also publish the dashboards & alerts with this role.

3) Admin : This is the highest role that Splunk offers. An admin is the person who "owns" the Splunk infrastructure and monitors users and usage to keep it functional.