https://community.dynatrace.com/t5/Open-Q-A/IAM-Policies-Restric-metrics-entities-for-namespace-scope/m-p/258626#M34116 <P>Hello&nbsp;<SPAN>Patryksp,&nbsp;</SPAN></P><P><SPAN>Yes, for access management to the information stored in Grail to work, you need to have the information stored in Grail.&nbsp;</SPAN></P> Tue, 08 Oct 2024 15:29:19 GMT jaume_reverte 2024-10-08T15:29:19Z https://community.dynatrace.com/t5/Open-Q-A/IAM-Policies-Restric-metrics-entities-for-namespace-scope/m-p/255597#M33731 <P>Hi,</P> <P>Currently we are working on creating IAM policies in order to restrict Grail data for only one namespace. With logs and events there is no problem (ALLOW storage:events:read, storage:logs:read where storage:k8s.namespace.name = "namespace-name";)</P> <P>When it comes to the metrics or entities, even creating the security_context does not have the intended effect.<BR />There is a possibilty that it doesn't work because we dont have metrics in Grail enabled.</P> <P>Does anybody faced the same "issue"?</P> <P>Best Regards<BR />Patryk</P> Fri, 13 Sep 2024 06:23:12 GMT https://community.dynatrace.com/t5/Open-Q-A/IAM-Policies-Restric-metrics-entities-for-namespace-scope/m-p/255597#M33731 patryk_ozimek2 2024-09-13T06:23:12Z https://community.dynatrace.com/t5/Open-Q-A/IAM-Policies-Restric-metrics-entities-for-namespace-scope/m-p/258626#M34116 <P>Hello&nbsp;<SPAN>Patryksp,&nbsp;</SPAN></P><P><SPAN>Yes, for access management to the information stored in Grail to work, you need to have the information stored in Grail.&nbsp;</SPAN></P> Tue, 08 Oct 2024 15:29:19 GMT https://community.dynatrace.com/t5/Open-Q-A/IAM-Policies-Restric-metrics-entities-for-namespace-scope/m-p/258626#M34116 jaume_reverte 2024-10-08T15:29:19Z