How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Datadog Restrictions API

The Restrictions API from Datadog — 6 operation(s) for restrictions.

Datadog Restrictions API is one of 290 APIs that Datadog publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include Restrictions. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, an API reference, and 4 JSON Schemas.

This API exposes 13 operations across 6 paths, and defines 29 schemas. It is described by OpenAPI 3.0.0, at version 1.0.

Requests are made against 3 base URLs: https://{subdomain}.{site}, {protocol}://{name}, https://{subdomain}.{site}.

13 operations 6 paths 29 schemas 3 DELETE6 GET1 PATCH3 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
1.0
Base URL
https://api.datadoghq.com
Authentication
OAuth 2.0, API Key, API Key, HTTP Bearer
Resource Areas
1

Authentication & Security 4

Datadog Restrictions API declares 4 security schemes for authenticating requests. It supports OAuth 2.0 (AuthZ) using the authorizationCode flow, exposing 68 scopes. An API key is passed in the header as DD-API-KEY (apiKeyAuth). An API key is passed in the header as DD-APPLICATION-KEY (appKeyAuth). It accepts HTTP bearer tokens (bearerAuth). By default, every request must be authenticated.

  • AuthZ — This API uses OAuth 2 with the implicit grant flow.
  • apiKeyAuth — Your Datadog API Key.
  • appKeyAuth — Your Datadog APP Key.

Paths & Operations 13

Across 6 paths, the API surfaces 13 operations — 3 DELETE, 6 GET, 1 PATCH, 3 POST. Each is listed below with its method, path, parameters, and response codes.

Restrictions 13
GET
/api/v2/logs/config/restriction_queries
Datadog List Restriction Queries
ListRestrictionQueries 2 params → 200403429
POST
/api/v2/logs/config/restriction_queries
Datadog Create a Restriction Query
CreateRestrictionQuery body → 200400403429
GET
/api/v2/logs/config/restriction_queries/role/{role_id}
Datadog Get Restriction Query for a Given Role
GetRoleRestrictionQuery 1 param → 200400403429
GET
/api/v2/logs/config/restriction_queries/user/{user_id}
Datadog Get All Restriction Queries for a Given User
ListUserRestrictionQueries 1 param → 200400403429
DELETE
/api/v2/logs/config/restriction_queries/{restriction_query_id}
Datadog Delete a Restriction Query
DeleteRestrictionQuery 1 param → 204400403404429
GET
/api/v2/logs/config/restriction_queries/{restriction_query_id}
Datadog Get a Restriction Query
GetRestrictionQuery 1 param → 200400403404429
PATCH
/api/v2/logs/config/restriction_queries/{restriction_query_id}
Datadog Update a Restriction Query
UpdateRestrictionQuery 1 param body → 200400403404429
DELETE
/api/v2/logs/config/restriction_queries/{restriction_query_id}/roles
Datadog Revoke Role from a Restriction Query
RemoveRoleFromRestrictionQuery 1 param body → 204400403404429
GET
/api/v2/logs/config/restriction_queries/{restriction_query_id}/roles
Datadog List Roles for a Restriction Query
ListRestrictionQueryRoles 3 params → 200400403404429
POST
/api/v2/logs/config/restriction_queries/{restriction_query_id}/roles
Datadog Grant Role to a Restriction Query
AddRoleToRestrictionQuery 1 param body → 204400403404429
DELETE
/api/v2/restriction_policy/{resource_id}
Datadog Delete a Restriction Policy
DeleteRestrictionPolicy 1 param → 204400403429
GET
/api/v2/restriction_policy/{resource_id}
Datadog Get a Restriction Policy
GetRestrictionPolicy 1 param → 200400403429
POST
/api/v2/restriction_policy/{resource_id}
Datadog Update a Restriction Policy
UpdateRestrictionPolicy 2 params body → 200400403429

Schemas 29

The contract defines 29 schemas that model the data the API accepts and returns. The most detailed are RestrictionQueryWithRelationships (4 properties), RestrictionQueryAttributes (3 properties), RestrictionQueryWithoutRelationships (3 properties), RestrictionQueryRole (3 properties). Each schema is shown below with its type and property counts.

RestrictionQueryWithoutRelationships
object
Restriction query object returned by the API.
3 properties
RestrictionQueryWithoutRelationshipsResponse
object
Response containing information about a single restriction query.
1 property
RestrictionPolicyBinding
object
Specifies which principals are associated with a relation.
2 properties 2 required
RestrictionQueryRole
object
Partial role object.
3 properties
RestrictionQueryUpdatePayload
object
Update a restriction query.
1 property
RestrictionQueryAttributes
object
Attributes of the restriction query.
3 properties
RestrictionQueryCreatePayload
object
Create a restriction query.
1 property
RelationshipToRoles
object
Relationship to roles.
1 property
RestrictionQueryRoleAttribute
object
Attributes of the role for a restriction query.
1 property
APIErrorResponse
object
API error response.
1 property 1 required
RelationshipToRole
object
Relationship to role.
1 property
RestrictionQueryCreateAttributes
object
Attributes of the created restriction query.
1 property
RestrictionPolicyUpdateRequest
object
Update request for a restriction policy.
1 property 1 required
RestrictionQueryResponseIncludedItem
An object related to a restriction query.
RestrictionQueryWithRelationshipsResponse
object
Response containing information about a single restriction query.
2 properties
RestrictionQueryListResponse
object
Response containing information about multiple restriction queries.
1 property
RestrictionQueryCreateData
object
Data related to the creation of a restriction query.
2 properties
RestrictionQueryRolesResponse
object
Response containing information about roles attached to a restriction query.
1 property
RestrictionPolicyAttributes
object
Restriction policy attributes.
1 property 1 required
RestrictionQueryRelationships
object
Relationships of the restriction query object.
1 property
RestrictionPolicyResponse
object
Response containing information about a single restriction policy.
1 property 1 required
RestrictionPolicy
object
Restriction policy object.
3 properties 3 required
RelationshipToRoleData
object
Relationship to role object.
2 properties
RestrictionQueryWithRelationships
object
Restriction query object returned by the API.
4 properties
RolesType
string
Roles type.
RestrictionQueryUpdateData
object
Data related to the update of a restriction query.
2 properties
RestrictionPolicyType
string
Restriction policy type.
RestrictionQueryUpdateAttributes
object
Attributes of the edited restriction query.
1 property
LogsRestrictionQueriesType
string
Restriction query resource type.

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

datadog-restrictions-api-openapi.yml Raw ↑

Other APIs Datadog publishes across the network.

Datadog Dashboards API
Datadog Synthetics API
Datadog Service Level Objectives API
Datadog Security Monitoring API
Datadog Service Definition API
Datadog Software Catalog API
Datadog Users API
Datadog Roles API
Datadog Key Management API
Datadog Organizations API
Datadog Downtimes API
Datadog RUM API
Where this information came from

This is an independent, third-party profile of Datadog Restrictions API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.