/etc/nova/policy.json

"compute_extension:aggregates": "rule:admin_api or role:datadog_monitoring",
"compute_extension:hypervisors": "rule:admin_api or role:datadog_monitoring",
"compute_extension:server_diagnostics": "rule:admin_api or role:datadog_monitoring",
"compute_extension:v3:os-hypervisors": "rule:admin_api or role:datadog_monitoring",
"compute_extension:v3:os-server-diagnostics": "rule:admin_api or role:datadog_monitoring",
"compute_extension:availability_zone:detail": "rule:admin_api or role:datadog_monitoring",
"compute_extension:v3:availability_zone:detail": "rule:admin_api or role:datadog_monitoring",
"compute_extension:used_limits_for_admin": "rule:admin_api or role:datadog_monitoring",
"os_compute_api:os-aggregates:index": "rule:admin_api or role:datadog_monitoring",
"os_compute_api:os-aggregates:show": "rule:admin_api or role:datadog_monitoring",
"os_compute_api:os-hypervisors": "rule:admin_api or role:datadog_monitoring",
"os_compute_api:os-hypervisors:discoverable": "rule:admin_api or role:datadog_monitoring",
"os_compute_api:os-server-diagnostics": "rule:admin_api or role:datadog_monitoring",
"os_compute_api:os-used-limits": "rule:admin_api or role:datadog_monitoring",

# /etc/neutron/policy.json
"get_network": "rule:admin_or_owner or rule:shared or rule:external or rule:context_is_advsvc or role:datadog_monitoring",

# /etc/keystone/policy.json
"identity:get_project": "rule:admin_required or role:datadog_monitoring",
"identity:list_projects": "rule:admin_required or role:datadog_monitoring"
"identity:list_users": "rule:admin_required or role:datadog_monitoring"