topic Re: Settings 2.0 - Policy to set key user actions in Open Q&A

Settings 2.0 - Policy to set key user actions

PedroDeodato — Mon, 14 Aug 2023 14:14:22 GMT

I was trying to create a policy so that I can give a user the permission to set Key User Actions, without giving them permissions to Edit the whole application, nor giving them access to the Environment's whole Settings page (i.e., I do not want to put them in the Monitoring Admin user group).

This user just needs to be able to set a User Action as key (and remove it from key, afterwards, if needed).

I notice that something similar can be done at the Services level: one can be given the permission to Write on the "Key Requests" list, and so set requests as Key...

As sugested on the "Key Requests" settings page on a given service:

The policy should look something like:

ALLOW settings:objects:read, settings:objects:write, settings:schemas:read
WHERE settings:schemaId = "builtin:settings.subscriptions.service";

Is something similar available to Key User Actions?
I know that this sort of page does not exist at the Application level, but I was wondering if the permission to set a User Action as Key (which does not require access to any settings page, just the button on the User Action page) could be granted via any existing policy?

Re: Settings 2.0 - Policy to set key user actions

Julius_Loman — Mon, 14 Aug 2023 11:45:39 GMT

Afaik there is no such schema you can use for key user action (at this time).

Re: Settings 2.0 - Policy to set key user actions

PedroDeodato — Mon, 14 Aug 2023 13:35:14 GMT

Thanks, @Julius_Loman !
I've searched and searched, so I assume that as well... I'll probably post it as a Product Idea 🙂

Re: Settings 2.0 - Policy to set key user actions

Julius_Loman — Mon, 14 Aug 2023 13:48:16 GMT

If there is no schema for it, then you can't use the settings API to modify it. Such schema is not listed in the docs, you can check the settings API to fetch a current schema list - maybe there is already something not yet listed in the docs.

Re: Settings 2.0 - Policy to set key user actions

DanielS — Mon, 14 Aug 2023 14:16:16 GMT

Hi @PedroDeodato Same issue here, only role to access the button is change monitoring settings at least under Management Zone permissions, not doable via policy.

Re: Settings 2.0 - Policy to set key user actions

PedroDeodato — Mon, 14 Aug 2023 14:48:22 GMT

Yep, that was what we did and found nothing to address our issue...

In the process, besides this one case, we found other interesting settings that have no schema for them... maybe we'll gather a list to post as Ideas, because such cases with the need for more granular permissions keep arising here and there: and, as you said, without schemas, there's nothing we can do about it 😞

Re: Settings 2.0 - Policy to set key user actions

Mohamed_Hamdy — Tue, 15 Aug 2023 08:17:13 GMT

Yes, I've faced the same issue but with extensions configurations

https://www.dynatrace.com/support/help/shortlink/iam-policystatements#extensions-configurations-write

Re: Settings 2.0 - Policy to set key user actions

Kenny_Gillette — Thu, 21 Dec 2023 20:15:50 GMT

I have documented everything that I can think of in a spreadsheet for Schema 1.0, 2.0 and no schema.

Here is link on no schema:

https://community.dynatrace.com/t5/Open-Q-A/Settings-1-0-2-0-and-some-settings-are-on-neither/m-p/231226#M29973

Re: Settings 2.0 - Policy to set key user actions

radek_jasinski — Thu, 21 Dec 2023 21:42:12 GMT

@Kenny_Gillette You have done a super job! It seems to be all there.