Table: datadog_role - Query Datadog Roles using SQL

Datadog is a monitoring service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform. Datadog Roles is a feature that allows you to create, modify, and manage custom roles, enabling you to control what users can see and modify within your organization and in the Datadog application. It allows you to provide granular access controls to different types of users.

Table Usage Guide

The datadog_role table provides insights into roles within Datadog. As a DevOps engineer, explore role-specific details through this table, including permissions and associated metadata. Utilize it to uncover information about roles, such as those with specific permissions, and the verification of role policies.

Examples

Basic info

Explore which roles have been created in your Datadog account and when they were established. This could be useful for auditing purposes or to understand the evolution of your account's access control structure.

select
  name,
  id,
  created_at
from
  datadog_role;

select
  name,
  id,
  created_at
from
  datadog_role;

List users assigned the Datadog Admin role

Determine the areas in which users are assigned the Datadog Admin role. This can be useful for managing access control and ensuring only authorized users have administrative privileges.

select
  name,
  id,
  jsonb_pretty(users) as users
from
  datadog_role
where
  name = 'Datadog Admin Role';

select
  name,
  id,
  users
from
  datadog_role
where
  name = 'Datadog Admin Role';

List all the permissions for a specific role

Explore the various permissions associated with a specific user role to understand the level of access granted. This is useful in managing user roles and ensuring appropriate access rights are provided.

select
  role.name as role_name,
  dd_perms.name as permission_name,
  dd_perms.description as permission_description
from
  datadog_role as role,
  jsonb_array_elements(permissions) as role_perms,
  datadog_permission as dd_perms
where
  role.name = 'Datadog Standard Role'
  and dd_perms.id = role_perms ->> 'id';

select
  role.name as role_name,
  dd_perms.name as permission_name,
  dd_perms.description as permission_description
from
  datadog_role as role,
  json_each(permissions) as role_perms,
  datadog_permission as dd_perms
where
  role.name = 'Datadog Standard Role'
  and dd_perms.id = json_extract(role_perms.value, '$.id');

Schema for datadog_role

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
created_at	timestamp with time zone		Creation time of the role.
id	text	=	Id of the role.
modified_at	timestamp with time zone		Time of last role modification.
name	text	=	Name of the role.
permissions	jsonb		List of users emails attached to role.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
user_count	bigint		Number of users associated with the role.
users	jsonb		Set of objects containing the permission ID and the name of the permissions granted to this role.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- datadog

You can pass the configuration to the command with the --config argument:

steampipe_export_datadog --config '<your_config>' datadog_role