이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다.Overview
This guide helps Datadog administrators at large organizations design and implement an access control strategy. It is intended for organizations that fit any of the following profiles:
- Have 100 or more users across multiple teams or business units
- Operate in regulated industries with data sensitivity requirements
- Need to expand Datadog usage across more users and teams while maintaining governance
As organizations grow on Datadog, they face a core tension: enabling self-service for developers, operators, and business users while maintaining boundaries on who can see or change what. This guide provides a decision framework for resolving that tension, not step-by-step UI instructions.
Prerequisites
This guide assumes familiarity with Datadog basics. Before starting, review:
Design and implement an access control strategy
You can read this guide sequentially to plan a new access strategy, or jump to the section most relevant to your current challenge.
Each section addresses a layer of your access control strategy, from organizational structure through enforcement and auditing:
| Section | What to decide |
|---|
| Choosing Your Datadog Topology | Single org vs. multi-org, and when each is appropriate |
| Permissions and Feature Access | Custom roles, keeping roles current, role hygiene |
| Assigning Users to Roles and Teams | Roles vs. Teams, and how to assign users at scale |
| Protecting Assets | Restricting who can edit or view Dashboards, Monitors, and other assets |
| Protecting Sensitive Data | Restricting access to telemetry data using Data Access Control |
| Credential Management | Managing API keys, app keys, and short-lived tokens at scale |
| Creating Access Policies | A reference for choosing the right enforcement mechanism |
| Sharing Across Organizations | Cross-Org Visibility, Shared Dashboards, and multi-org governance |
| Example Implementations | Enterprise implementation templates |
Next steps
Start with Choosing Your Datadog Topology to determine whether your organization should use a single Datadog org or multiple orgs.
Further reading
