Optional additionalA container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.
The policy content as key-value pairs. For org_config policies, an arbitrary key-value map (for example, {"value": "UTC"}). For role policies, a permissions key containing an array of permission UUIDs (for example, {"permissions": ["<uuid>", ...]}).
Optional enforcementThe enforcement tier of the policy. OVERRIDE_ALLOWED means the policy is set but member orgs may mutate it. GROUP_MANAGED means the policy is strictly controlled and mutations are blocked for affected orgs. DELEGATE means each member org controls its own value. role policies only support GROUP_MANAGED and DELEGATE — OVERRIDE_ALLOWED is rejected for this policy type. Transitioning a role policy to DELEGATE (disabling it) is one-way — the policy cannot be transitioned back to GROUP_MANAGED afterward.
The name of the policy. This becomes the name of the resource created across orgs in the group (for example, for role policies, the name of the created role).
Optional policyThe type of the policy. org_config indicates a policy backed by an organization configuration setting. role indicates a policy backed by a Datadog custom role.
Generated using TypeDoc
Attributes for creating an org group policy. If
policy_typeis not provided, it defaults toorg_config.enforcement_tieris optional; if not provided, the resulting value depends onpolicy_typeand is otherwise unspecified.