Best practices

Here are some of the best practices related to managing accounts and users:

• Consider creating multiple organizations for isolating production monitoring from monitoring rolled out on non-production infrastructure and various monitoring environments for developing and testing new monitoring features. It will keep the production monitoring clean and safe from any inadvertent changes.
• Create custom user roles for use in production monitoring. Usage of predefined user roles could be more permissive than is required for the user. Always use the policy of least-needed permissions, and remember that monitoring is mostly read-only, unless automatic problem resolution is implemented.
• Roll out SSO for Datadog users to log in.
• Use major programmatic access authenticated using a service account and not a real user, as real users could leave the company and the deletion of user keys can break your programs.