Infrastructure

New Relic

Connecting New Relic to Ploy lets Ploy inventory who has access to your New Relic organization. Once connected, Ploy regularly pulls in your New Relic users — their name, email, licence tier (Basic, Core, or Full platform), group memberships, and last activity — and matches them to people in your Ploy environment so you can review and manage that access.

Before you start

  • You need a New Relic user who can manage users — an organization admin, or a user with the Authentication Domain Manager role. Only those users can create a key that reads your user list.

  • Know your New Relic region: EU accounts sign in at one.eu.newrelic.com; everyone else is US. You'll choose this during setup.

1. Create a User API key in New Relic

  1. Sign in to New Relic and open Administration (from the user menu in the bottom-left).

  2. Go to API keys.

  3. Click Create a key.

  4. Set Account to the account you want Ploy to read.

  5. Set Key type to User. (The "Ingest" key types are for sending data into New Relic and won't work here.)

  6. Give the key a recognisable name, such as "Ploy integration", then click Create a key.

  7. Copy the key value — it starts with NRAK-.

2. Connect New Relic in Ploy

  1. Open Ploy's Integrations page: app.joinploy.com/integrations

  2. Select the New Relic widget and click + Add.

  3. Choose your Region — US or EU — to match your New Relic account.

  4. Paste your User API key into the API Key field.

  5. Click Test Connection — Ploy confirms it can reach your New Relic organization.

  6. Click Save.

Ploy runs its first scan shortly and keeps the data refreshed automatically.

Troubleshooting

  • "New Relic rejected the API key" — Make sure you created a User key (not an Ingest key) and copied the whole value, including the NRAK- prefix. Check the key hasn't been deleted in New Relic.

  • It connects but no users appear — The key's owner needs permission to manage users. Ask a New Relic organization admin to create the key, or to grant the owner the Authentication Domain Manager role.

  • Test Connection fails — Confirm whether your team signs in at newrelic.com (US) or one.eu.newrelic.com (EU) and pick the matching region.

Was this helpful?