Setting permissions for Synthetic monitoring

In the Instana UI, go to Settings > API Tokens, and edit the tokens that you created for using Synthetic monitoring. You can enable the added permissions for each API token that you will use with the Synthetic monitoring APIs.

To use Synthetic monitoring, you need a group with appropriate permissions for Synthetic monitoring. You can set the desired Synthetic monitoring access level when you create a new group or when you modify an existing group. All Synthetic monitoring permissions are granted to the users in the Owner group by default. The Access All - Viewer permission is granted to the users in the Default group by default.

If you have groups from Instana 259 or earlier versions with no permissions for Synthetic monitoring, prevent the users in these groups from monitoring the infrastructure entities that are connected to applications or platforms visible to those users.

To prevent users in a group from accessing Synthetic monitoring, complete the following steps:

  1. Go to Settings > Team Settings > Groups.
  2. Select the group and click Edit access scope.
  3. In Synthetic Monitoring, select No access.
  4. Click Save.

Permission Details

The following permissions gives you control over viewing and configuring Synthetic locations (PoP), viewing and configuring Synthetic tests, and viewing Synthetic test results. These permissions are applicable to both API tokens and the Instana UI.

  • Configuration of Synthetic tests: Gives permission to create, update, and delete a Synthetic test.
  • Configuration of Synthetic locations: Gives permission to delete a Synthetic location.
  • Access to Synthetic tests: Gives permission to view Synthetic tests.
  • Access to Synthetic locations: Gives permission to view Synthetic locations.
  • Access to Synthetic test results: Gives permission to view Synthetic test results.
  • Access to use Synthetic credentials: Gives permission to confirm existence of a Synthetic credential and use it in a Synthetic test.
  • Configuration of Synthetic credentials: Gives permission to create and delete Synthetic credentials.

For more information about granting permissions in the Instana UI, see Managing user access. During the Synthetic monitoring RBAC improvements private preview, to understand behavior changes that are related to permissions and user access, participating customers should see RBAC improvements (private preview).

For more information about updating API Tokens, see Web REST API Tokens.

Notes:

  • Users with the permission Access to Synthetic tests can view the test definition including the credential name. Users must have both Access to use Synthetic credentials and Configuration of Synthetic tests permissions to use the credential in a Synthetic test. No user can ever view the value of the credential.
  • A user that creates a test must be able to view locations so that they can select a location where the test will run.
  • To hide the Synthetic Monitoring option in the navigation menu for a set of users, create a group and in Synthetic Monitoring select No Access. Then, add the users to this group.