Using IAM policies to only RUN, not EDIT notebooks

Hi all, I want some users to be able to use my notebook (so also run it when they need to) but I do not want them to have edit rights to create own notebooks or remove something in my notebook. Is this possible with an IAM policy?

Preferably I would even like to limit these permissions to a specific notebook but I cannot find any allowed WHERE statements for document:documents:write or document:documents:read.

Product idea has been raised → https://community.dynatrace.com/t5/Product-ideas/Missing-the-IAM-document-documents-run-policy/idi-p/253759

Thanks :slightly_smiling_face: Unfortunately I found out that it is not possible yet, so workarounds and product idea kudos are always welcome :wink:

Hi Marina - I also have this same request, so I support your need here.

I made a comment on the product idea → https://community.dynatrace.com/t5/Product-ideas/IAM-document-documents-run-policy/idc-p/281965/highlight/true#M53028