Policies for Synthetic Browser Monitors Editors

r_weber — Thu, 29 Jan 2026 08:04:07 GMT

I think the synthetic browser monitors are missing a critical policy to allow individual usergroupt to only administrate synthetic monitors. I would say it's a bug.

We can create a policy like:

ALLOW settings:objects:read, settings:objects:write, settings:schemas:read WHERE settings:schemaId IN ("builtin:synthetic.browser.name","builtin:synthetic.browser.scheduling","builtin:synthetic.http.name","builtin:synthetic.synthetic-availability-settings","builtin:synthetic.synthetic-availability-settings","builtin:synthetic.browser.outage-handling","builtin:synthetic.http.scheduling","builtin:synthetic.browser.assigned-applications","builtin:synthetic.http.performance-thresholds","builtin:synthetic.browser.kpms","builtin:synthetic.http.assigned-applications","builtin:synthetic.http.outage-handling","builtin:synthetic.http.cookies","builtin:synthetic.browser.performance-thresholds");

This will allow a group member with this policy assigned to change almost any setting of that monitor. But you will not be able to edit/change the script execution, edit individual steps or use the script recorder to basically change the ESSENTIAL parts of the browser monitor.
It seems this was simply forgotten to add to a schema.

Any solution for this, without giving users full config permissions on the environment?

Re: Policies for Synthetic Browser Monitors Editors

Jacek_Janowicz — Fri, 30 Jan 2026 12:09:50 GMT

Hi @r_weber

Great timing for that question, as I just shared some details about the current status and our plans for access control this week. Please, have a look at the questions and answers collected here
In short, yes, we're going to deliver the solution that you described. I just need to ask you for some more patience

Best Regards,

Jacek

topic Re: Policies for Synthetic Browser Monitors Editors in Synthetic Monitoring

Policies for Synthetic Browser Monitors Editors

Re: Policies for Synthetic Browser Monitors Editors