# Policy permissions for service user to run anomaly detectors as an actor

**URL:** <https://community.dynatrace.com/t/policy-permissions-for-service-user-to-run-anomaly-detectors-as-an-actor/51832>\
**Category:** Alerting\
**Tags:** user-management, anomaly-detection\
**Created:** [May 27, 2025, 5:52am UTC](https://community.dynatrace.com/t/policy-permissions-for-service-user-to-run-anomaly-detectors-as-an-actor/51832 "2025-05-27T05:52:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![p\_devulapalli](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/p_devulapalli/32/41590_2.png) [@p\_devulapalli](https://community.dynatrace.com/u/p_devulapalli)\
**Post date:** [May 27, 2025, 5:52am UTC](https://community.dynatrace.com/t/policy-permissions-for-service-user-to-run-anomaly-detectors-as-an-actor/51832/1 "2025-05-27T05:52:43Z")

</div>

Hi All,

Can anyone please share the specific permissions that needs to be assigned to a service user in Dynatrace to run as an actor for anomaly detector?

Thanks,

---

<div class="post-metadata">

**Author:** ![p\_devulapalli](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/p_devulapalli/32/41590_2.png) [@p\_devulapalli](https://community.dynatrace.com/u/p_devulapalli)\
**Post date:** [May 28, 2025, 2:43am UTC](https://community.dynatrace.com/t/policy-permissions-for-service-user-to-run-anomaly-detectors-as-an-actor/51832/2 "2025-05-28T02:43:12Z")

</div>

If anyone is interested , just providing the Grail read data permissions for service user worked for my use case

```markup
//Grail read data
ALLOW
storage:buckets:read,
storage:logs:read,
storage:metrics:read,
storage:spans:read,
storage:bizevents:read,
storage:events:read,
storage:system:read,
storage:spans:read,
storage:entities:read,
storage:user.events:read,
storage:application.snapshots:read;

```