Skip to content

Document AI Guard permissions in onboarding guide#36087

Merged
janine-c merged 1 commit into
oceane.bordeau/ai-guard-docs-refactorfrom
emmanuelle.lejeail/ai-guard-permissions-docs
Apr 22, 2026
Merged

Document AI Guard permissions in onboarding guide#36087
janine-c merged 1 commit into
oceane.bordeau/ai-guard-docs-refactorfrom
emmanuelle.lejeail/ai-guard-permissions-docs

Conversation

@emmlejeail

@emmlejeail emmlejeail commented Apr 17, 2026

Copy link
Copy Markdown
Contributor

What does this PR do? What is the motivation?

Adds a Required permissions table to the AI Guard onboarding prerequisites so users understand which Datadog permissions are needed for each AI Guard workflow:

  • AI Guard Evaluate (ai_guard_evaluate) — needed to call the evaluate API and to create an application key with the ai_guard_evaluate scope.
  • AI Guard View (ai_guard_view) — needed to view the AI Guard UI, including signals, spans, and read-only settings (service blocking policies, evaluation sensitivity, tool policies, tool allowlist). Also required to report false positives.
  • AI Guard Write (ai_guard_write) — needed to modify AI Guard configuration (blocking policies, sensitive data scanning, tool policies, tool blocking, tool allowlist, evaluation sensitivity thresholds).
  • User Access Manage (user_access_manage) — needed to create a Data Access Control restricted dataset that limits access to AI Guard spans.

Also cross-links the new section from the "Create API and application keys" step.

Merge instructions

Merge readiness:

  • Ready for merge

Additional notes

@github-actions

github-actions Bot commented Apr 17, 2026

Copy link
Copy Markdown
Contributor

@emmlejeail
emmlejeail changed the base branch from master to oceane.bordeau/ai-guard-docs-refactor April 20, 2026 07:56
Add a Required permissions table to the AI Guard setup prerequisites
listing AI Guard Evaluate, AI Guard View, AI Guard Write, and User Access
Manage with their roles.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
@emmlejeail
emmlejeail force-pushed the emmanuelle.lejeail/ai-guard-permissions-docs branch from bdff624 to 193a070 Compare April 20, 2026 08:10
@emmlejeail
emmlejeail marked this pull request as ready for review April 20, 2026 08:13
@emmlejeail
emmlejeail requested a review from a team as a code owner April 20, 2026 08:13
@janine-c janine-c added the editorial review Waiting on a more in-depth review label Apr 20, 2026
@janine-c janine-c self-assigned this Apr 20, 2026

@janine-c janine-c left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great!

@janine-c
janine-c merged commit cfd7aab into oceane.bordeau/ai-guard-docs-refactor Apr 22, 2026
18 checks passed
@janine-c
janine-c deleted the emmanuelle.lejeail/ai-guard-permissions-docs branch April 22, 2026 17:16
obordeau added a commit that referenced this pull request Apr 27, 2026
* feat(ai-guard): extract security signals into dedicated page

* feat(ai-guard): extract setup instructions into dedicated page

* feat(ai-guard): create setup subpages for integrations, SDK, and HTTP API

* refactor(ai-guard): remove API and SDK sections from onboarding page

* feat(ai-guard): add Datadog Agent setup section to integrations and SDK pages

* refactor(ai-guard): move tracer library install section from setup index to SDK page

* refactor(ai-guard): replace Agent setup step with instrumentation options overview

* refactor(ai-guard): reorder onboarding sections and trim HTTP API page

* feat(ai-guard): update automatic integrations with env vars, AI SDK v6, and blocking mode

* fix(ai-guard): update SDK docs with tags, sds, and accurate method signatures

* feat(ai-guard): add SDS category and rule tag attributes to detection rules

* fix(ai-guard): add warning that HTTP API requests don't appear in Datadog UI

* Update versions and build sdk setup partial

* Add manual instrumentation docs

* Fix links in the sdk setup partial

* Fix whitespace trimmers

* Improve manual integrations

* Update content/en/security/ai_guard/setup/sdk.md

Co-authored-by: Alberto Vara <[email protected]>

* Update content/en/security/ai_guard/setup/sdk.md

Co-authored-by: Alberto Vara <[email protected]>

* Ruby: Add content-parts example to AI Guard SDK

* Document AI Guard permissions in setup guide (#36087)

Add a Required permissions table to the AI Guard setup prerequisites
listing AI Guard Evaluate, AI Guard View, AI Guard Write, and User Access
Manage with their roles.

Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Fix sensitive data link

* Update content/en/security/ai_guard/setup/automatic_integrations.md

Co-authored-by: Janine Chan <[email protected]>

* Fix langchain links

* Update content/en/security/ai_guard/setup/automatic_integrations.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/manual_integrations.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/sdk.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/signals.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/http_api.md

Co-authored-by: Janine Chan <[email protected]>

* Use headers instead of collapse

* Remove private true

* Remove tabs

* Update header size

* Remove mardown in partial

* Remove langchain dead link

* Remove collapses

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* refactor(ai-guard): rename tracer references to SDK

---------

Co-authored-by: Manuel Álvarez Álvarez <[email protected]>
Co-authored-by: Alberto Vara <[email protected]>
Co-authored-by: Yury Lebedev <[email protected]>
Co-authored-by: Emmanuelle Lejeail <[email protected]>
Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>
Co-authored-by: Janine Chan <[email protected]>
estherk15 pushed a commit that referenced this pull request May 4, 2026
* feat(ai-guard): extract security signals into dedicated page

* feat(ai-guard): extract setup instructions into dedicated page

* feat(ai-guard): create setup subpages for integrations, SDK, and HTTP API

* refactor(ai-guard): remove API and SDK sections from onboarding page

* feat(ai-guard): add Datadog Agent setup section to integrations and SDK pages

* refactor(ai-guard): move tracer library install section from setup index to SDK page

* refactor(ai-guard): replace Agent setup step with instrumentation options overview

* refactor(ai-guard): reorder onboarding sections and trim HTTP API page

* feat(ai-guard): update automatic integrations with env vars, AI SDK v6, and blocking mode

* fix(ai-guard): update SDK docs with tags, sds, and accurate method signatures

* feat(ai-guard): add SDS category and rule tag attributes to detection rules

* fix(ai-guard): add warning that HTTP API requests don't appear in Datadog UI

* Update versions and build sdk setup partial

* Add manual instrumentation docs

* Fix links in the sdk setup partial

* Fix whitespace trimmers

* Improve manual integrations

* Update content/en/security/ai_guard/setup/sdk.md

Co-authored-by: Alberto Vara <[email protected]>

* Update content/en/security/ai_guard/setup/sdk.md

Co-authored-by: Alberto Vara <[email protected]>

* Ruby: Add content-parts example to AI Guard SDK

* Document AI Guard permissions in setup guide (#36087)

Add a Required permissions table to the AI Guard setup prerequisites
listing AI Guard Evaluate, AI Guard View, AI Guard Write, and User Access
Manage with their roles.

Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* Fix sensitive data link

* Update content/en/security/ai_guard/setup/automatic_integrations.md

Co-authored-by: Janine Chan <[email protected]>

* Fix langchain links

* Update content/en/security/ai_guard/setup/automatic_integrations.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/manual_integrations.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/sdk.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/signals.md

Co-authored-by: Janine Chan <[email protected]>

* Update content/en/security/ai_guard/setup/http_api.md

Co-authored-by: Janine Chan <[email protected]>

* Use headers instead of collapse

* Remove private true

* Remove tabs

* Update header size

* Remove mardown in partial

* Remove langchain dead link

* Remove collapses

* Update content/en/security/ai_guard/setup/_index.md

Co-authored-by: Janine Chan <[email protected]>

* refactor(ai-guard): rename tracer references to SDK

---------

Co-authored-by: Manuel Álvarez Álvarez <[email protected]>
Co-authored-by: Alberto Vara <[email protected]>
Co-authored-by: Yury Lebedev <[email protected]>
Co-authored-by: Emmanuelle Lejeail <[email protected]>
Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>
Co-authored-by: Janine Chan <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

editorial review Waiting on a more in-depth review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants