You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/logs/guide/logs-rbac.md
+7-7
Original file line number
Diff line number
Diff line change
@@ -22,7 +22,7 @@ In many organizations, logs may contain sensitive information that requires [scr
22
22
This guide covers the following topics:
23
23
24
24
1.[**Prerequisites for Admins**](#prerequisites): Details the necessary prerequisites.
25
-
2.[**Setting Up Roles for the ACME Team**](#set-up-roles): Instructions on creating roles and assigning team members.
25
+
2.[**Setting Up Roles for the ACME Team**](#setting-up-roles): Instructions on creating roles and assigning team members.
26
26
3.[**Limiting Access to Logs**](#restrict-access-to-logs): How to employ restriction queries to control log access.
27
27
4.[**Configuring Permissions on Log Assets**](#restrict-access-to-log-assets): Guidelines for setting permissions on pipelines, indexes, and archives.
28
28
@@ -38,7 +38,7 @@ You can customize this setup to fit your organizational needs, either by consoli
38
38
39
39
In Datadog, permissions are additive; users belonging to multiple teams benefit from combined permissions across all assigned roles.
40
40
41
-
## The role of Datadog admin
41
+
## The role of Datadog Admin
42
42
43
43
As a Datadog Admin, you can configure a secure environment for ACME team members to manage their logs without affecting logs from other teams. This guide explains the steps for setting up roles and permissions to restrict log access to ACME Users specifically. You can also adapt the setup to make ACME Admins serve as Datadog Admins if needed.
44
44
@@ -60,7 +60,7 @@ Navigate to the [Users list][8] to verify that you have all these permissions. I
60
60
61
61
### Get an API key and an app key
62
62
63
-
If you plan to use the Datadog API, you need an API key and an app key from an Admin user. API keys and app keys can be generated on your [Datadog account API key page][9]. Ensure the app key is associated with a user who has the necessary permissions. For more information, see [API and app keys][10].
63
+
If you plan to use the Datadog API, you need an API key and an app key from an Admin user. API keys and app keys can be generated in your [organization settings][9]. Ensure the app key is associated with a user who has the necessary permissions. For more information, see [API and app keys][10].
64
64
65
65
In this guide, replace `<DATADOG_API_KEY>` and `<DATADOG_APP_KEY>` with your Datadog API key and application key, respectively. A terminal with `CURL` is also required.
66
66
@@ -84,13 +84,13 @@ This section guides you through creating two roles, `ACME Admin` and `ACME User`
84
84
{{< tabs >}}
85
85
{{% tab "UI" %}}
86
86
87
-
1. Navigate to the [Groups Section][1] in Datadog Organization Settings.
87
+
1. Navigate to the [Roles section][1] in the Datadog Organization Settings.
88
88
1. Click **New Role** to create `ACME Admin` and `ACME User`roles.
89
-
1. Assign Standard Access and basic permissions, such as Read Index Data and Live Tail.
89
+
1. Assign Standard Access and basic permissions, such as Logs Read Index Data and Logs Live Tail.
90
90
91
91
{{< img src="logs/guide/rbac/add_role.png" alt="Add a new role" style="width:90%;">}}
92
92
93
-
For more information on creating roles see [Access Control][3].
93
+
For more information on creating roles, see [Access Control][3].
94
94
95
95
96
96
[1]: https://app.datadoghq.com/access/roles
@@ -110,7 +110,7 @@ For more information on creating roles see [Access Control][3].
110
110
"attributes": { "name": "ACME Admin", [...] }
111
111
[...]
112
112
```
113
-
1. Assign the necessary permissions using to the [Grant Permissions API][3].
113
+
1. Assign the necessary permissions using the [Grant Permissions API][3].
0 commit comments