topic API-token only for Maintenance Windows via Dynatrace API in Dynatrace API

API-token only for Maintenance Windows via Dynatrace API

miliseclen — Wed, 21 Aug 2024 07:54:07 GMT

Is there a way to give READ&WRITE permissions only to manage maintenance windows via Dynatrace API?

Currently, to use maintenance windows with API we need an API token with READ&WRITE all config permissions, which it's not convenient because people who only need to manage maintenance windows, could have access to other DT configurations.

Thank you in advance for your help.

Re: Api-token only for maintenance windows via Dynatrace API

miliseclen — Thu, 14 Apr 2022 12:39:33 GMT

@EvelinAcosta @Lassehansen

Re: Api-token only for maintenance windows via Dynatrace API

mark_bley — Thu, 21 Apr 2022 16:48:34 GMT

Hi @miliseclen,

yes that should be possible.

First you would need to create a policy like following:

ALLOW settings:schemas:read, settings:objects:write WHERE settings:schemaId = "builtin:alerting.maintenance-window";

This policy you can assign to the group of users that needs to be able to modify MWs.

Using a personal access token (PTA) from an account of said user group, that token given the settings.read and setting.write permissions will be able to modify and create MWs.

Hope this helps!

Best,

Mark

Re: Api-token only for maintenance windows via Dynatrace API

Kenny_Gillette — Mon, 04 Nov 2024 20:59:42 GMT

I did not know this. Going to test this!!!

Clarification: I setup IAM Policies, but didn't realize they use same permissions for API.