Which of the following is the recommended guideline for creating a new user role?

When creating new user roles in Splunk, it ' s recommended to define roles that incorporate the necessary capabilities and index access permissions. This approach allows for granular control over user access and aligns with best practices for role-based access control.

" You can create custom roles and assign those roles to your users. Custom roles let you make granular adjustments to user access, including... Role inheritance... Capabilities... Allowed and default indexes... "

— About configuring role-based user access -

By creating roles that incorporate both capabilities and index access, administrators can efficiently manage user permissions and maintain a secure Splunk environment.