For more information on how to configure user roles in Splunk Enterprise Security, see the product documentation:

• Pair Threat Intelligence Management (Cloud) with Splunk Enterprise Security on-premises

• Overview of threat intelligence in Splunk Enterprise Security