topic Dynatrace IAM: Limit Access to Dashboard App Only in Dashboarding

Dynatrace IAM: Limit Access to Dashboard App Only

Irdina — Fri, 30 May 2025 07:50:10 GMT

Hello,

I’m new to Dynatrace and currently exploring Dynatrace IAM. I’d like to know if it’s possible to create a policy that allows a specific group to access only the Dashboard app and view dashboards, without any permissions to perform other actions.

I tried creating a policy with the permissions shown in the attached image (excluding permissions that involve more than read/view), but that led users to not even have access to the environment. To resolve that, I added the permission 'ALLOW environment:roles:viewer', but that ended up giving the users more than just read/view-only access.

How can I achieve the desired read-only access to dashboards without granting broader permissions?
Your help would be greatly appreciated!

Thank you!

Re: Dynatrace IAM: Limit Access to Dashboard App Only

p_devulapalli — Wed, 04 Jun 2025 07:07:05 GMT

@Irdina You can add additional restrictions by locking down by app-id for dashboards

https://docs.dynatrace.com/docs/shortlink/iam-policystatements#app-engine-apps-run

ALLOW app-engine:apps:run WHERE shared:app-id = "dynatrace.dashboards";

Re: Dynatrace IAM: Limit Access to Dashboard App Only

Irdina — Wed, 04 Jun 2025 07:37:24 GMT

Hye @p_devulapalli ,
Thank you for your assistance. I tried your suggested solution and further refined access by replacing 'ALLOW environment:roles:viewer' with 'ALLOW environment:roles:logviewer' to enhance restrictions. This adjustment worked as intended.🙏