Assigning required capabilities for your app

After you install the app, you can share the app with non-administrator users by adding it to a user role.

About this task

When you install your app, it is displayed as a capability in the User Roles window on the Admin tab. Capabilities are sets of permissions that user roles have. To use the app, a QRadar® administrator must assign the app to a user role.


  1. Click User Roles on the Admin tab.
  2. From the list of users on the User Roles window, select the user role that you want to assign the app to.
  3. Select the QRadar App for Splunk Data Forwarding checkbox and click Save.

What to do next

Configuring QRadar App for Splunk Data Forwarding