Tagging rights for users

[bhb_tenhave]

Is it possible to assign rights to a user so they can manually add a tag without the "change monitor settings rights" on a management zone?

[bhb_tenhave · Accepted solution]

Found the solution by building a policy:

ALLOW settings:objects:write, settings:objects:read, settings:schemas:read WHERE settings:schemaId = "builtin:tags.manual-tagging";

[Mizső]

Hi @bhb_tenhave 

Please find an example below for maintenance window settings.

For manual tagging create a new policy and bind it to the read only user group (which ones do not have configuration rights)

ALLOW settings:objects:read, settings:objects:write, settings:schemas:read WHERE settings:schemaId = "builtin:tags.manual-tagging";

I hope it helps.

Best regards,

Mizső

[andre_glanzmann]

hello , 
this works fine, but is it possible to grand only tagging permission to certain tag keys? 
so users are only creating Tags within a range of keywords.

regards André

[PacoPorro]

Dynatrace does not directly support restricting tagging permissions to specific tag keys.
@Mizső pointed in the right direction.

If you're in SaaS, you can create a specific app that calls the API with only a few values.
https://developer.dynatrace.com/quickstart/