Using IAM policies to only RUN, not EDIT notebooks

[marina_pollehn]

Hi all, I want some users to be able to use my notebook (so also run it when they need to) but I do not want them to have edit rights to create own notebooks or remove something in my notebook. Is this possible with an IAM policy?

Preferably I would even like to limit these permissions to a specific notebook but I cannot find any allowed WHERE statements for document:documents:write or document:documents:read.

[AntonPineiro · Accepted solution]

Product idea has been raised -> https://community.dynatrace.com/t5/Product-ideas/Missing-the-IAM-document-documents-run-policy/idi-p...

[marina_pollehn]

Thanks 🙂 Unfortunately I found out that it is not possible yet, so workarounds and product idea kudos are always welcome 😉

[m3tomlins]

Hi Marina - I also have this same request, so I support your need here.

I made a comment on the product idea -> https://community.dynatrace.com/t5/Product-ideas/IAM-document-documents-run-policy/idc-p/281965/high...