Restrict metric_ingest OneAgent API access

[andre_vdveen]

Is there a way to restric access or usage of the OneAgent metric API so that certain users or groups cannot use it?
I don't see a way to do this via RBAC or ABAC.

[Julius_Loman · Accepted solution]

No.  Not using Dynatrace. The endpoint is available if you enable it for local ingest. You must use other options on the host to prevent specific users from accessing it like local firewall, selinux or apparmor.

[DanielS · Accepted solution]

Hello @andre_vdveen as @Julius_Loman says we managed to control this using local firewalls controlled centrally. You can make a rule to permit or deny connections to your configured port.