Best practices
Here are some of the best practices related to managing accounts and users:
- Consider creating multiple organizations for isolating production monitoring from monitoring rolled out on non-production infrastructure and various monitoring environments for developing and testing new monitoring features. It will keep the production monitoring clean and safe from any inadvertent changes.
- Create custom user roles for use in production monitoring. Usage of predefined user roles could be more permissive than is required for the user. Always use the policy of least-needed permissions, and remember that monitoring is mostly read-only, unless automatic problem resolution is implemented.
- Roll out SSO for Datadog users to log in.
- Use major programmatic access authenticated using a service account and not a real user, as real users could leave the company and the deletion of user keys can break your programs.