Required Datadog role permissions

To interact with the Actions Datastore, your Datadog account must have the following permissions, which are included in the Datadog Standard Role:

• actions_datastore_read - Allows read access to the data within the Actions Datastore.
• actions_datastore_write - Allows modification of data within the Actions Datastore, including adding, editing, and deleting records.

To use the Actions Datastore UI, you also need the following permission, which is also included in the Datadog Standard Role:

• actions_datastore_manage - Allows management of the Actions Datastore, including creating, updating, and deleting the datastore itself.

Action credentials

Datastores shares the Action Catalog and the connection credentials for integrations with Datadog Workflow Automation and App Builder products. For more information on configuring credentials, see Connections.

Datastore permissions

The following permissions are available for datastores:

Manager

Read and write access to data and can edit the datastore schema.

Contributor

Read and write access to the datastore.

Viewer

Read access to the datastore.

None

No access.

Restrict access to a specific datastore

During the datastore creation process, you’re asked to set the organization access level for the datastore. You can choose either Contributor, Viewer, or None. Contributor is the default access level.

To restrict access to an existing datastore for either an organization or individual:

1. Hover over the datastore on the Datastore page and click the padlock (Permissions) icon.
2. Use the drop-down menus to edit the permissions for a user or organization.
3. Click Save.

Elevate access

The user_access_manage permission is required to elevate your access to datastores.

To elevate your access:

1. Hover over the datastore on the Datastore page and click the padlock (Permissions) icon.
2. Click Elevate Access.
3. Click Save.

Further reading

Additional helpful documentation, links, and articles:

ConnectionsDOCUMENTATION