Skip to content

Add minimum Kafka ACL permissions for Kafka Monitoring and Messages #35817

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
piochelepiotr merged 7 commits into from
Apr 15, 2026
Merged

Add minimum Kafka ACL permissions for Kafka Monitoring and Messages #35817

Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
bc2c990
Add minimum Kafka ACL permissions for Kafka Monitoring and Messages
piochelepiotr Apr 7, 2026
91b837c
Address PR review comments
piochelepiotr Apr 8, 2026
57b559d
Move message reading permissions to _index.md, revert messages.md
piochelepiotr Apr 8, 2026
bb7c6af
Remove messages.md, consolidate into Kafka Monitoring page
piochelepiotr Apr 8, 2026
18d6384
Revert messages.md deletion, keep ACL permissions in _index.md only
piochelepiotr Apr 8, 2026
fa8e691
Update content/en/data_streams/kafka/_index.md
piochelepiotr Apr 8, 2026
1204546
Update content/en/data_streams/kafka/_index.md
piochelepiotr Apr 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions content/en/data_streams/kafka/_index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,24 @@ With Data Streams Monitoring's Kafka Monitoring, a Datadog Agent check connects
- **Connect services to topics**: See which producers and consumers interact with each topic, with linked owners, repos, on-call rotations, traces, and error logs
- **Inspect topic schemas and messages**: View schemas, compare versions, and access messages to debug poison payloads or explore the topic

## Prerequisites

If your Kafka cluster uses ACLs, the Datadog Agent user requires the following minimum permissions:

| Resource Name | Resource Type | Operation |
|---------------|---------------|------------------|
| `kafka-cluster` | `CLUSTER` | `Describe` |
| `kafka-cluster` | `CLUSTER` | `DescribeConfigs` |
| `*` | `TOPIC` | `Describe` |
| `*` | `TOPIC` | `DescribeConfigs` |
| `*` | `GROUP` | `Describe` |

To retrieve messages in the **Messages** section, the Agent user also requires:

| Resource Name | Resource Type | Operation |
|---------------|---------------|-----------|
| `*` | `TOPIC` | `Read` |

## Setup

Go to the [Kafka Monitoring setup page][1] and click {{< ui >}}Get Started{{< / ui >}}. Then choose your environment and follow the instructions. To request assistance, choose {{< ui >}}Request a pairing session{{< /ui >}}.
Expand All @@ -18,6 +36,7 @@ Go to the [Kafka Monitoring setup page][1] and click {{< ui >}}Get Started{{< /

The setup page provides environment-specific configuration instructions. You can copy the instructions directly to an AI agent with **Copy for AI**.


## Workflows

### Monitor cluster health and performance
Expand Down
Loading