Disponible pour:

Cloud SIEM | Workload Protection | Protection des applications et des API

Présentation

Le système de gestion des accès de Datadog utilise un contrôle d’accès basé sur les rôles, vous permettant de définir le niveau d’accès des utilisateurs aux ressources Datadog. Les utilisateurs sont affectés à des rôles qui définissent leurs autorisations de compte, notamment les données qu’ils peuvent lire et les ressources de compte qu’ils peuvent modifier. Lorsque des autorisations sont accordées à un rôle, tout utilisateur associé à ce rôle reçoit ces autorisations. Consultez la documentation Account Management Access Control pour plus d’informations.

Pour les produits Datadog Security, un contrôle d’accès granulaire est disponible pour les règles de détection, les suppressions et les règles de sévérité dynamique, vous permettant de restreindre l’accès par équipes, rôles ou comptes de service.

Autorisations

Consultez la liste des autorisations pour les produits de sécurité.

Restreindre l’accès aux règles de détection

By default, all users have view and edit access to the detection rules. To use granular access controls to limit the roles that may edit a single rule:

  1. Click the vertical three-dot menu for the rule and select Permissions.
  2. Click Restrict Access. The dialog box updates to show that members of your organization have Viewer access by default. Use that dropdown menu to select one or more roles, teams, or users that may edit the security rule.
  3. Use the dropdown menu to select one or more roles, teams, or users that may edit the security rule.
  4. Click Add.
  5. Click Save.

Note: To maintain your edit access to the rule, Datadog requires you to include at least one role that you are a member of before saving.

To restore access to a rule:

  1. Click the vertical three-dot menu for the rule and select Permissions.
  2. Click Restore Full Access.
  3. Click Save.

Restreindre l’accès aux règles de suppression

By default, all users have view and edit access to suppressions. To use granular access controls to limit the roles that may edit a suppression rule:

  1. Click the vertical three-dot menu for the rule and select Permissions.
  2. Click Restrict Access. The dialog box updates to show that members of your organization have Viewer access by default. Use that dropdown menu to select one or more roles, teams, or users that may edit the suppression rule.
  3. Click Add.
  4. Click Save.

Note: To maintain your edit access to the rule, Datadog requires you to include at least one role that you are a member of before saving.

To restore access to a rule:

  1. Click the vertical three-dot menu for the rule and select Permissions.
  2. Click Restore Full Access.
  3. Click Save.

Restreindre l’accès aux règles de sévérité dynamique

By default, all users have view and edit access to dynamic severity rules. To use granular access controls to limit the roles that may edit a dynamic severity rule:

  1. Click the vertical three-dot menu for the dynamic severity rule and select Permissions.
  2. Click Restrict Access. The dialog box updates to show that members of your organization have Viewer access by default. Use that dropdown menu to select one or more roles, teams, or users that may edit the dynamic severity rule.
  3. Click Add.
  4. Click Save.

Note: To maintain your edit access to the dynamic severity rule, Datadog requires you to include at least one role that you are a member of before saving.

To restore access to a dynamic severity rule:

  1. Click the vertical three-dot menu for the dynamic severity rule and select Permissions.
  2. Click Restore Full Access.
  3. Click Save.