14 Apr 2022 01:33 PM - last edited on 21 Aug 2024 08:54 AM by Michal_Gebacki
Is there a way to give READ&WRITE permissions only to manage maintenance windows via Dynatrace API?
Currently, to use maintenance windows with API we need an API token with READ&WRITE all config permissions, which it's not convenient because people who only need to manage maintenance windows, could have access to other DT configurations.
Thank you in advance for your help.
Solved! Go to Solution.
21 Apr 2022 05:48 PM
Hi @miliseclen,
yes that should be possible.
First you would need to create a policy like following:
ALLOW settings:schemas:read, settings:objects:write WHERE settings:schemaId = "builtin:alerting.maintenance-window";
This policy you can assign to the group of users that needs to be able to modify MWs.
Using a personal access token (PTA) from an account of said user group, that token given the settings.read and setting.write permissions will be able to modify and create MWs.
Hope this helps!
Best,
Mark
04 Nov 2024 08:54 PM - edited 04 Nov 2024 08:59 PM
I did not know this. Going to test this!!!
Clarification: I setup IAM Policies, but didn't realize they use same permissions for API.