---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Create users in TISC instance

# Create users in TISC instance {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Users can be created in the ServiceNow
TISC instance with any valid user role \[`sn_sec_tisc.api_obs_read_access]`.

## Before you begin

Role required: Splunk admin.

## Procedure

1. Log in to Splunk.
2. Navigate to AppsManage Apps or select the Manage icon.
3. Search for the Threat Intelligence Security Center for Splunk app and install it.
4. After installation, the application appears in the list of apps.  
   For more information, see [Assign a role to a user](https://www.servicenow.com/docs/access?context=t_AssignARoleToAUser&version=australia&pubname=australia-platform-administration&ft:locale=en-US).
{#tisc-create-users__steps_kvn_1pl_bjc}
**Related tasks**   

* [Configure TISC add-on in Splunk](https://servicenow-prod.fluidtopics.net/eGDCRjLSe5DcQnmzBfqjVg "Configure the TISC add-on in Splunk to connect your account, define data inputs, and pull observable records into the KV store for search and analysis.")

*[\>]: and then