From 8800672c322fe67e8d05c5ceb983a56188b372d9 Mon Sep 17 00:00:00 2001 From: Ursula Chen Date: Wed, 19 Nov 2025 14:14:57 -0600 Subject: [PATCH 1/2] Add team permissions --- content/en/account_management/teams/manage.md | 24 +++++++++++++++++-- 1 file changed, 22 insertions(+), 2 deletions(-) diff --git a/content/en/account_management/teams/manage.md b/content/en/account_management/teams/manage.md index c3f971dcad9..09ae55768ec 100644 --- a/content/en/account_management/teams/manage.md +++ b/content/en/account_management/teams/manage.md @@ -50,16 +50,36 @@ From the settings dialog, use the menu to customize the following team settings: ## Team membership -To differentiate members of your team, designate them as team managers. In the member list, a "TEAM MANAGER" badge appears next to team managers' names. +### Team manager -Under the team's settings, specify which users can modify the team membership. The following options are available: +To differentiate members of your team, designate some of them as team managers. In the member list, a "TEAM MANAGER" badge appears next to team managers' names. + +### Team modification permissions + +Under the team's settings, in the **Permissions** tab, specify which users can modify the team membership. The following options are available: - Only users with the `user_access_manage` permission - Team managers - Team managers and members - Anyone in the organization +The list is sorted in order of increasing permissiveness. Each option in the list includes the group in the entries above it. For example, selecting "team managers" means that both team managers and users with user_access_manage can modify membership. + +The option that you select for which users can add and remove members determines whether you can add the team to access control lists. Two types of teams exist: invite only teams and open teams. + +Invite only teams +: Teams with restricted membership. Can be set as access control recipients. Created when you restrict team membership modification to one of the first three options. + +Open teams +: Teams with unrestricted membership. Cannot be set as access control recipients. Created when you allow **Anyone in the organization** to modify team membership. + Users with the `user_access_manage` permission can set default rules on who can add or remove members, or edit team details. Set default rules with the **Default Settings** button on the team directory page. Override these policies for an individual team on the team details panel. +### Teams managed outside Datadog + +In some cases, a team's membership cannot be directly modified within Datadog by anyone (including a user with `user_access_manage`): +- If your org has selected SAML as the only team provisioning source, then the SAML team mappings control team membership. You cannot modify the team membership through Datadog. +- If a team is managed through an identity provider, then the identity provider controls team membership. You cannot modify the team membership through Datadog. + ### Subteams (hierarchical teams) With subteams, you can nest teams within each other to mimic your company's hierarchy in Datadog, allowing for a more complete and accurate ownership model. Subteams also provide an enhanced filtering experience; select a larger team (like a director-level group) to find all the data connected to any of its subteams. From 04419d17bfac1bb7c1971bfa159ad107932bba72 Mon Sep 17 00:00:00 2001 From: Ursula Chen <58821586+urseberry@users.noreply.github.com> Date: Fri, 21 Nov 2025 12:25:06 -0600 Subject: [PATCH 2/2] Add code formatting. Co-authored-by: Heston Hoffman --- content/en/account_management/teams/manage.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/account_management/teams/manage.md b/content/en/account_management/teams/manage.md index 09ae55768ec..14f417154d1 100644 --- a/content/en/account_management/teams/manage.md +++ b/content/en/account_management/teams/manage.md @@ -62,7 +62,7 @@ Under the team's settings, in the **Permissions** tab, specify which users can m - Team managers and members - Anyone in the organization -The list is sorted in order of increasing permissiveness. Each option in the list includes the group in the entries above it. For example, selecting "team managers" means that both team managers and users with user_access_manage can modify membership. +The list is sorted in order of increasing permissiveness. Each option in the list includes the group in the entries above it. For example, selecting "team managers" means that both team managers and users with `user_access_manage` can modify membership. The option that you select for which users can add and remove members determines whether you can add the team to access control lists. Two types of teams exist: invite only teams and open teams.