Datadog/rbac
@figura/datadog/rbacv2026.07.24.3
01README
Datadog RBAC — role, permission, user, and restriction query analysis via the Datadog RBAC API (v2). Answers "who can access what data?" by resolving the full chain: user → roles → permissions + restriction queries → effective access. Supports all Datadog sites (us1, us3, us5, eu1, ap1, us1-fed).
Authentication
Requires a Datadog API key and Application key, stored in a swamp vault.
Methods
- list_roles — List all roles with their assigned permissions - list_users — List all users with role assignments - list_permissions — Full permission catalog - list_restriction_queries — Dataset-level filters (logs, traces, events, RUM) - analyze_access — Resolve effective access for a specific user or role
02Models
@figura/datadog/rbacv2026.07.24.3datadog/rbac.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| apiKey | string | Datadog API key (DD-API-KEY) |
| appKey | string | Datadog application key (DD-APPLICATION-KEY) |
| site | enum | Datadog site |
fn list_roles(include_permissions?: boolean)
List all roles in the org with their assigned permissions
| Argument | Type | Description |
|---|---|---|
| include_permissions? | boolean | Whether to fetch permissions for each role (default: true) |
fn list_users(filter_status?: string)
List all users with their role assignments
| Argument | Type | Description |
|---|---|---|
| filter_status? | string | Filter by status (Active, Pending, Disabled). Default: all. |
fn list_permissions()
List the full permission catalog — all available permissions and their groups
fn list_restriction_queries(data_type?: enum)
List restriction queries — dataset-level filters that control who sees what logs/traces/events
| Argument | Type | Description |
|---|---|---|
| data_type? | enum | Filter by data type. If omitted, fetches all types. |
fn analyze_access(user_email?: string, role_name?: string)
Analyze effective access for a user (by email) or role (by name). Resolves the full chain: user → roles → permissions + restriction queries → what data they can see.
| Argument | Type | Description |
|---|---|---|
| user_email? | string | User email to analyze. Mutually exclusive with role_name. |
| role_name? | string | Role name to analyze. Mutually exclusive with user_email. |
Resources
roles(infinite)— All roles with permissions
users(infinite)— All users with role assignments
permissions(infinite)— Full permission catalog
restriction_queries(infinite)— Restriction queries for data access control
access_analysis(infinite)— Effective access analysis for a user or role
03Reports
@figura/datadog-rbac-reportworkflow
datadog_rbac_report.ts
Datadog RBAC analysis — role/user permission matrix, restriction queries, and effective access overview
datadogrbacpermissionssecurityaccess-control
04Previous Versions
2026.07.24.2
2026.07.24.1
05Stats
A
100 / 100
Downloads
0
Archive size
20.8 KB
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License declared1/1earned
- Verified public repository2/2earned
06Platforms
07Labels