The Splunk Common Information Model (CIM) add-on contains a collection of preconfigured data models
that you can apply to your data at search time. Each data model in the CIM consists of a set of field names and
tags that define the least common denominator of a domain of interest. The CIM currently has data models
defined for 22 categories, including Alerts, Databases, and Email. User permissions is not one of the
categories in the CIM.ReferencesSee Overview of the Splunk Common Information Model and Splunk
Common Information Model - Your Questions Answered.