user-access-management

Manage Datadog users, service accounts, teams, SCIM provisioning, and authentication mappings via the pup CLI.

5|2|Updated Mar 9, 2026
One-click install
npx skills add https://github.com/lauhon/pi --skill user-access-management-lauhon
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: user-access-management
Source: https://github.com/lauhon/pi/tree/main/skills/user-access-management
Command: npx skills add https://github.com/lauhon/pi --skill user-access-management-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Managing Datadog organization access—users, service accounts, teams, SCIM provisioning, and SSO mappings—requires navigating many separate API endpoints, which is slow and error-prone when done manually. ## Core Features & Use Cases - User & Service Account Lifecycle: Create, update, disable users, send invitations, and manage service account application keys with scoped permissions. - Team Organization: Create teams, manage memberships and roles, build parent-child hierarchies, attach dashboard/runbook/repo links, and configure notification routing rules. - Identity Integration: Provision users and groups via SCIM, map SAML/LDAP attributes to Datadog roles, and sync teams from GitHub. - Use Case: When a new engineer joins, create their Datadog user with the Standard role, add them to the platform team, and verify their SAML group maps to the correct role—all through guided commands with confirmation prompts for destructive actions. ## Quick Start Ask the agent to list all users in your Datadog organization and show their roles and statuses.

Frequently Asked Questions about user-access-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a new user in Datadog from the command line?

Use the pup users create command with the email, name, and optional role flags, for example assigning Datadog Standard or Datadog Admin. The agent asks for confirmation before executing any user creation.

How do I sync Datadog teams with GitHub?

Run pup teams sync with the source set to github, your organization name, and a sync type of link or provision. You can enable membership syncing and choose one-time or continuous synchronization frequency.

What permissions are required to manage Datadog users and teams?

You need DD_API_KEY and DD_APP_KEY environment variables, where the Application Key must have administrative permissions for user and team management. Standard user keys cannot access these administrative endpoints.

Does this support SCIM provisioning from an identity provider?

Yes, it supports full SCIM operations including listing, creating, updating, patching, and deleting users and groups. SCIM must be configured in your Datadog organization settings with a connected identity provider first.

Why do I get an insufficient permissions error when managing users?

This error occurs when the Application Key lacks administrative or user management scopes. Contact your Datadog administrator to grant the required permissions to the Application Key being used.

Can I delete teams or disable users without confirmation?

No, destructive operations like disabling users, deleting teams, and removing members require explicit confirmation. The agent displays a clear warning about permanent changes before executing any delete operation.