---
title: Permissions and Access Control for Feature Flags
description: Control who can read and write feature flags and environments in Datadog.
breadcrumbs: >-
  Docs > Feature Flags > Concepts > Permissions and Access Control for Feature
  Flags
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Permissions and Access Control for Feature Flags

{% callout %}
# Important note for users on the following Datadog sites: app.ddog-gov.com, us2.ddog-gov.com

{% alert level="danger" %}
This product is not supported for your selected [Datadog site](https://docs.datadoghq.com/getting_started/site.md). ({% placeholder "user-datadog-site-name" /%}).
{% /alert %}

{% /callout %}

## Overview{% #overview %}

Datadog Feature Flags supports organization-level permissions and granular per-flag access controls. Use these controls to limit who can view or change flag configuration and environments.

## Organization-level permissions{% #organization-level-permissions %}

Control access at the organization level with the following permissions:

| Permission                                | Description                                                                      |
| ----------------------------------------- | -------------------------------------------------------------------------------- |
| **Feature Flag Config Read**              | View feature flag configuration                                                  |
| **Feature Flag Config Write**             | Create and modify feature flag configuration                                     |
| **Feature Flag Environment Config Read**  | View environment configuration                                                   |
| **Feature Flag Environment Config Write** | Create and modify environments                                                   |
| **Feature Flag Approvals Override**       | Enable or disable approvals on existing flags, and bypass the approvals workflow |

Assign these permissions through [Datadog roles](https://docs.datadoghq.com/account_management/rbac.md).

## Granular access on individual flags{% #granular-access-on-individual-flags %}

Restrict edit access on a specific flag by selecting **Settings > Permissions** on the flag details page:

{% image
   source="https://docs.dd-static.net/images/feature_flags/concepts/flag-grace-modal.dd8b5126b8055f816225f80fc0e37ec4.png?auto=format&fit=max&w=850 1x, https://docs.dd-static.net/images/feature_flags/concepts/flag-grace-modal.dd8b5126b8055f816225f80fc0e37ec4.png?auto=format&fit=max&w=850&dpr=2 2x"
   alt="Permissions settings panel on a feature flag showing granular access controls for users, service accounts, roles, and teams." /%}

You can limit edit access to:

- Individual users
- Service accounts
- Roles
- Teams

Users without edit access can still view the flag if they have read permissions at the organization level.

## Further reading{% #further-reading %}

- [Approvals](https://docs.datadoghq.com/feature_flags/concepts/approvals.md)
- [Role Based Access Control](https://docs.datadoghq.com/account_management/rbac.md)