認可スコープ

スコープは、アプリケーションが組織の Datadog データにアクセスする際の粒度を制限し、定義できるようにするための認可メカニズムです。ユーザーやサービスアカウントの代わりにアクセスを許可されると、アプリケーションは明示的に要求された情報のみにアクセスでき、それ以上にはアクセスできません。

アプリケーションのスコープに関するベストプラクティスは、アプリケーションが意図したとおりに機能するために必要な最小限の特権と最も制限の多いスコープを維持することです。これにより、ユーザーはアプリケーションへのきめ細かなアクセス制御が可能になり、アプリケーションがどのようにデータを使用しているかが透けて見えるようになります。たとえば、ダッシュボードのデータを読み取るだけのサードパーティアプリケーションには、組織内のユーザーを削除または管理する権限は必要ありません。

Datadog では、次の 2 つの方法でスコープを使用することができます。

Dashboards, Dashboard Lists

Downtimes, Monitors

Scope name

Description

Endpoints that require this scope

monitors_downtime

Set downtimes to suppress alerts from any monitor in an organization. The ability to write monitors is not required to set downtimes.

Events

Scope name

Description

Endpoints that require this scope

events_read

Read Events data.

Incidents, Incident Services, Incident Teams

Metrics

Scope name

Description

Endpoints that require this scope

timeseries_query

Query Timeseries data.

Security Monitoring

Scope name

Description

Endpoints that require this scope

security_monitoring_filters_read

Read Security Filters.

security_monitoring_filters_write

Create, edit, and delete Security Filters.

security_monitoring_rules_read

Read Detection Rules.

security_monitoring_rules_write

Create and edit Detection Rules.

security_monitoring_signals_read

View Security Signals.

security_monitoring_signals_write

Synthetics

Scope name

Description

Endpoints that require this scope

synthetics_global_variable_read

View, search, and use in tests the list of global variables available for Synthetics.

synthetics_global_variable_write

Create, edit, and delete global variables for Synthetics.

synthetics_private_location_read

View, search, and use in tests the list of available private locations.

synthetics_private_location_write

Create and delete private locations as well as seeing the associated installation guidelines.

Usage Metering

Scope name

Description

Endpoints that require this scope

usage_read

View your organization's usage and usage attribution.

Get the list of available daily custom reports
Get specified daily custom reports
Get the list of available monthly custom reports
Get specified monthly custom reports
Get hourly usage for analyzed logs
Get usage attribution
Get hourly usage for audit logs
Get hourly usage for Lambda
Get billable usage across your account
Get hourly usage for CI Visibility
Get hourly usage for CSPM
Get hourly usage for Cloud Workload Security
Get hourly usage for Database Monitoring
Get hourly usage for Fargate
Get hourly usage for hosts and containers
Get hourly usage attribution
Get hourly usage for incident management
Get hourly usage for indexed spans
Get hourly usage for ingested spans
Get hourly usage for IoT
Get hourly usage for Logs
Get hourly logs usage by retention
Get hourly usage for Logs by Index
Get monthly usage attribution
Get hourly usage for Network Flows
Get hourly usage for Network Hosts
Get hourly usage for Online Archive
Get hourly usage for profiled hosts
Get hourly usage for RUM Units
Get hourly usage for RUM Sessions
Get hourly usage for Sensitive Data Scanner
Get hourly usage for SNMP devices
Get usage across your multi-org account
Get hourly usage for Synthetics Checks
Get hourly usage for Synthetics API Checks
Get hourly usage for Synthetics Browser Checks
Get hourly usage for custom metrics
Get all custom metrics by hourly average
Get hourly usage for Application Security
Get cost across multi-org account
Get estimated cost across multi-org account
Get hourly usage for Lambda Traced Invocations
Get hourly usage for Observability Pipelines