[]
export = system

[correlationsearches]
access = read: [ * ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin, itoa_team_admin ]
export = system

[savedsearches]
access = read: [ * ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin, itoa_team_admin ]
export = system

[savedsearches/_private_splunk_itsi_getIndexesInfo]
owner = admin
access = read: [ * ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin, itoa_team_admin ]
export = system

[savedsearches/Cleanup%20Models%20For%20Predictive%20Analytics]
owner = nobody

[savedsearches/Entity%20Lifecycle%20Management%20-%20Unmark%20Retirable%20Search]
owner = nobody

[views/advanced_configuration]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/alarm_console]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/alerts_and_episodes]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/alerts_connection_configuration]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin, itoa_team_admin ]

[views/alerts_connections_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin, itoa_team_admin ]

[views/alerts_review]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/app_upgrade]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/backup_restore_lister]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/backup_restore_configuration]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/base_search_configuration]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/custom_threshold_window]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/content_pack]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/content_pack_authorship]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/correlation_search_edit]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/correlation_searches_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/custom_threshold_windows_lister]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/data_integrations]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/deep_dive]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/discovery_search_detail]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/duplicate_entities_management]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/drift_detection_configuration]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin ]

[views/entities_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/entity_detail]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/entity_overview]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/event_analytics_audit]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/event_analytics_audit_studio]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/event_analytics_audit_deprecated]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/event_analytics_monitoring]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/event_management_state_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/glass_table]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/glass_tables_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/health_analytics_console]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/homeview]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/hybrid_action_dispatching_config]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/itsi_audit_logs]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/itsi_audit_logs_deprecated]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/itsi_event_management]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/itsi_healthcheck]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/itsi_svc_statistics]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/itsi_svc_statistics_deprecated]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/kpi_base_searches_lister]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/kpi_threshold_template_editor]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/kpi_threshold_templates_lister]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/license_upgrade]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/maintenance_window_detail_view]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/maintenance_windows_lister]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/notable_event_aggregation_policies_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/notable_event_aggregation_policy_configuration_view]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/notable_event_aggregation_policy_detail_view]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/pagerduty_configuration]
access = read: [ admin ], write: [ admin ], delete: [ admin ]

[views/partial_backup_details_view]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/predictive_analytics_usage]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/refresh_queue_explorer]
access = read: [ itoa_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/saved_deep_dive_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/saved_homepage_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/service_definition]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/service_importer]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/service_kpi_management]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/service_sandbox]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin ]

[views/service_sandbox_lister]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin, itoa_team_admin ], delete: [ itoa_admin ]

[views/service_template_detail_view]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/service_templates_lister]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/suite_redirect]
access = read: [ itoa_admin, itoa_team_admin, itoa_analyst, itoa_user ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/team_detail_view]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/teams_lister]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/upgrade_readiness]
access = read: [ itoa_admin, itoa_team_admin ], write: [ itoa_admin ], delete: [ itoa_admin ]

[views/webhook_details]
access = read: [ admin ], write: [ admin ], delete: [ admin ]

[views/webhooks_lister]
access = read: [ admin ], write: [ admin ], delete: [ admin ]