topic Re: Restrict metric_ingest OneAgent API access in Open Q&A

Restrict metric_ingest OneAgent API access

andre_vdveen — Wed, 19 Mar 2025 19:36:39 GMT

Is there a way to restric access or usage of the OneAgent metric API so that certain users or groups cannot use it?
I don't see a way to do this via RBAC or ABAC.

Re: Restrict metric_ingest OneAgent API access

Julius_Loman — Wed, 19 Mar 2025 20:08:04 GMT

No. Not using Dynatrace. The endpoint is available if you enable it for local ingest. You must use other options on the host to prevent specific users from accessing it like local firewall, selinux or apparmor.

Re: Restrict metric_ingest OneAgent API access

DanielS — Wed, 19 Mar 2025 20:20:09 GMT

Hello @andre_vdveen as @Julius_Loman says we managed to control this using local firewalls controlled centrally. You can make a rule to permit or deny connections to your configured port.