Permissions and Access Control for Feature Flags

Docs > Feature Flags > Concepts > Permissions and Access Control for Feature Flags

Overview

Datadog Feature Flags supports organization-level permissions and granular per-flag access controls. Use these controls to limit who can view or change flag configuration and environments.

Organization-level permissions

Control access at the organization level with the following permissions:

Permission	Description
Feature Flag Config Read	View feature flag configuration
Feature Flag Config Write	Create and modify feature flag configuration
Feature Flag Environment Config Read	View environment configuration
Feature Flag Environment Config Write	Create and modify environments
Feature Flag Approvals Override	Enable or disable approvals on existing flags, and bypass the approvals workflow

Assign these permissions through Datadog roles.

Granular access on individual flags

Restrict access on a specific flag by selecting Settings > Permissions on the flag details page:

Permissions settings panel on a feature flag showing granular access controls for users, service accounts, roles, and teams.

Grant one of the following access levels to individual users, service accounts, roles, or teams:

Access level	Description
Viewer	View the flag.
Contributor	View the flag and submit change suggestions for review. Cannot approve or reject suggestions, or manage permissions on the flag.
Editor	View the flag, submit change suggestions for review, and approve or reject suggested changes. Can also manage permissions on the flag.

Users without granular access can still view the flag if they have read permissions at the organization level.