topic Re: Using IAM policies to only RUN, not EDIT notebooks? in Dashboarding

Using IAM policies to only RUN, not EDIT notebooks

marina_pollehn — Thu, 29 Aug 2024 12:10:30 GMT

Hi all, I want some users to be able to use my notebook (so also run it when they need to) but I do not want them to have edit rights to create own notebooks or remove something in my notebook. Is this possible with an IAM policy?

Preferably I would even like to limit these permissions to a specific notebook but I cannot find any allowed WHERE statements for document:documents:write or document:documents:read.

Re: Using IAM policies to only RUN, not EDIT notebooks?

AntonPineiro — Wed, 21 Aug 2024 11:01:33 GMT

Product idea has been raised -> https://community.dynatrace.com/t5/Product-ideas/Missing-the-IAM-document-documents-run-policy/idi-p/253759

Re: Using IAM policies to only RUN, not EDIT notebooks?

marina_pollehn — Wed, 21 Aug 2024 11:03:46 GMT

Thanks 🙂 Unfortunately I found out that it is not possible yet, so workarounds and product idea kudos are always welcome 😉

Re: Using IAM policies to only RUN, not EDIT notebooks

m3tomlins — Mon, 21 Jul 2025 19:59:58 GMT

Hi Marina - I also have this same request, so I support your need here.

I made a comment on the product idea -> https://community.dynatrace.com/t5/Product-ideas/IAM-document-documents-run-policy/idc-p/281965/highlight/true#M53028