topic Is it possible to manage policy boundaries using API? in Open Q&A

Is it possible to manage policy boundaries using API?

panumjp — Wed, 20 Nov 2024 12:26:22 GMT

Is it possible?

Policy boundaries:

https://docs.dynatrace.com/docs/manage/identity-access-management/permission-management/manage-user-permissions-policies/iam-policy-boundaries

Re: Is it possible to manage policy boundaries using API?

erh_inetum — Thu, 21 Nov 2024 05:34:13 GMT

Hi @panumjp ,

I think you can use these calls to policy boundaries:

To get this, go to Account Manager > Identity & access management > OAuth clients. And click on "Account Managment API"

The API calls you need are in "Policy Managment" section.

Hope it helps.

Regards,

Elena.

Re: Is it possible to manage policy boundaries using API?

panumjp — Thu, 21 Nov 2024 07:01:19 GMT

Thanks,

Looks like boundary APIs are not yet documented here: https://docs.dynatrace.com/docs/discover-dynatrace/references/dynatrace-api/account-management-api/policy-management-api

I was able to see boundaries in binding using API, but I was not able to modify boundaries of existing binding.

Do you know is that possible?

Re: Is it possible to manage policy boundaries using API?

erh_inetum — Thu, 21 Nov 2024 07:07:50 GMT

Hi @panumjp

I think you have to use this one to update a policy that already exists:

Hope it helps.

Regards,

Elena.

Re: Is it possible to manage policy boundaries using API?

panumjp — Thu, 21 Nov 2024 07:28:11 GMT

I think that API is for updating and creating new boundaries. For me (dynatrace newbie) most logical place to set boundaries would be "/iam/v1/repo/{levelType}/{levelId}/bindings/groups/{groupUuid}" API, but who knows 🙂

Re: Is it possible to manage policy boundaries using API?

PacoPorro — Thu, 21 Nov 2024 08:12:29 GMT

This would be a great Product Idea. Can I suggest you to create a new one?

https://community.dynatrace.com/t5/Product-ideas/idb-p/DynatraceProductIdeas