topic Re: IAM Policy statement (Service reference) in Open Q&A

IAM Policy statement (Service reference)

RSarafaniuk — Mon, 05 Jun 2023 12:33:21 GMT

As I saw in documentation, we can do policies with extensions, but I can't see from user account hub and can't set them up. I try to do such rule " ALLOW extensions:definitions:write WHERE extensions:extension-name = "Oracle Database"; " and have no result. Maybe someone tried such policies already and can make an example or give an advice?

Re: IAM Policy statement (Service reference)

ChadTurner — Mon, 12 Jun 2023 13:57:36 GMT

You'll want to pull the Policy Schema's available in your environment. This can be done via the Environment API V2:

Once you grab the desired Schema you can write it to allow or deny and provide that string into a Policy Schema which is then linked to a group that contains the users in which it will apply to.

Re: IAM Policy statement (Service reference)

AurelienGravier — Thu, 17 Aug 2023 11:49:52 GMT

Hello RSarafaniuk,

I have experimented the same issue for IAM with extensions and you are facing to a known issue on UI.

The workaround is described here :

https://community.dynatrace.com/t5/Dynatrace-tips/IAM-Policy-Read-and-write-permissions-to-extension...

Regards Aurélien.

Re: IAM Policy statement (Service reference)

RSarafaniuk — Thu, 17 Aug 2023 11:53:01 GMT

Hello @AurelienGravier and @ChadTurner,

Thank a lot for your support and given information. I will try to use it.