topic Re: Tagging rights for users in Dynatrace Managed Q&A

Tagging rights for users

bhb_tenhave — Fri, 17 Feb 2023 08:41:36 GMT

Is it possible to assign rights to a user so they can manually add a tag without the "change monitor settings rights" on a management zone?

Re: Tagging rights for users

bhb_tenhave — Fri, 17 Feb 2023 10:13:56 GMT

Found the solution by building a policy:

ALLOW settings:objects:write, settings:objects:read, settings:schemas:read WHERE settings:schemaId = "builtin:tags.manual-tagging";

Re: Tagging rights for users

Mizső — Fri, 17 Feb 2023 10:18:08 GMT

Hi @bhb_tenhave

Please find an example below for maintenance window settings.

For manual tagging create a new policy and bind it to the read only user group (which ones do not have configuration rights)

ALLOW settings:objects:read, settings:objects:write, settings:schemas:read WHERE settings:schemaId = "builtin:tags.manual-tagging";

I hope it helps.

Best regards,

Mizső

Re: Tagging rights for users

andre_glanzmann — Thu, 03 Oct 2024 07:25:42 GMT

hello ,
this works fine, but is it possible to grand only tagging permission to certain tag keys?
so users are only creating Tags within a range of keywords.

regards André

Re: Tagging rights for users

PacoPorro — Thu, 03 Oct 2024 10:46:57 GMT

Dynatrace does not directly support restricting tagging permissions to specific tag keys.
@Mizső pointed in the right direction.

If you're in SaaS, you can create a specific app that calls the API with only a few values.
https://developer.dynatrace.com/quickstart/