topic Re: IAM Policy to allow users (Power Users) to manage all classic Dashboards in Dashboarding

IAM Policy to allow users (Power Users) to manage all classic Dashboards

Kenny_Gillette — Tue, 27 Feb 2024 08:19:06 GMT

Team,

We implemented IAM Policies and now our Power Users do NOT have access to update other user's classic dashboards in an environment. They use to be able to make changes before moving to IAM Policies.

Has anybody been able to solve for this? We are constantly getting asked and would love for classic dashboards to be on Settings 2.0.

Options:

1.) Get owner to give permissions to needed groups/people

2.) Get Dynatrace Admins to give permissions to needed groups/people

3.) Use API/Code to add groups to all dashboards to be able to modify dashboards

We have too many dashboards to do this manually.

Thoughts?

Re: IAM Policy to allow users (Power Users) to manage all classic Dashboards

Kenny_Gillette — Thu, 29 Feb 2024 19:27:36 GMT

Guess no one has any other ideas?

Re: IAM Policy to allow users (Power Users) to manage all classic Dashboards

Christophe_N — Mon, 25 Mar 2024 13:23:04 GMT

Hi Kenny,

Did you get any other feedback ?

I am not sure of good understanding : you have lose the access to edit dashboard after migration to IAM ?
and you are talking about "classic" dashboard, not the new UI ?

On our side we have implemented IAM policies but we didn't face this issue, maybe just because "power users" are all full admin on our side.

Feel free to ask , I can check our permissions and maybe can help you.

Christophe

Re: IAM Policy to allow users (Power Users) to manage all classic Dashboards

Kenny_Gillette — Tue, 26 Mar 2024 15:42:40 GMT

Hi there. No feedback. I talked to Dynatrace and engineer didn't think of any way of doing this.

Please let me know if you figured out as this would be great. There are many pages that Dynatrace has not moved to Settings 2.0 or even Settings 1.0. This is one of those pages.

Re: IAM Policy to allow users (Power Users) to manage all classic Dashboards

DanielS — Tue, 26 Mar 2024 21:31:23 GMT

Hello @Kenny_Gillette

What I have done is the following:

Get the list of all dashboards ID's with

curl -X GET "https://yyyyyyy.live.dynatrace.com/api/config/v1/dashboards " -H "accept: application/json; charset=utf-8" -H "Authorization: Api-Token dt0c01.xxxxxxTOKENxxxxxxx"

Send it to a file and leave one Dashboard ID/line.
Now you can execute a command line command to do it for all the dashboards ID's

FOR /F "eol=" %I in (Dashidprod.txt) do curl -X PUT "https://YYYYYYY.live.dynatrace.com/api/config/v1/dashboards/%I/shareSettings" -H "accept: */*" -H "Authorization: Api-Token dt0c01.XXXXTOKENXXXXX" -H "Content-Type: application/json; charset=utf-8" -d "{\"id\":\"%I\",\"enabled\":true,\"preset\":false,\"permissions\":[{\"id\":\"118e247e-4d02-4de0-9983-319cb6c46534\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"b95fe192-48d7-41d3-9f86-55037db63758\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"b45f03e7-6dc9-49a4-9464-b04dd07c1a67\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"26cbb608-0f67-4a3f-973c-37a0c2e2766c\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"bf0471cc-9393-47e6-b9db-710704cca630\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"fe5e155a-e4d1-4d47-b87d-6f2e8d0feab8\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"7f2ec5ed-0405-4b01-b34e-4f2e3432cade\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"e1262f16-d8f0-4fbc-bfba-53b0f8601cb3\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"df2d3574-9d31-4257-8981-a1607ca83083\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"b6f9ee15-0c41-4064-a1ae-a248cbc19afb\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"870fd2a0-f610-48ad-8ed1-9170291ef50f\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"53719c94-f0b6-4953-a558-c065d2eb938b\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"767f6e66-932f-49e0-b15a-34aa0ae57773\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"399b96cd-48d3-4725-b441-cb58f1c5d2f7\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"f560b2fc-a4c0-4b74-9f75-f540fa02aba4\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"665d3577-34c1-40c4-bdc8-8aed87dcc141\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"c7ede233-c700-4745-8295-e80342e3fa37\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"bb161829-5e81-4f6a-ae65-7af5d051882d\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"f8b8bdc6-5178-4a31-9fdd-309620046f93\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"b69b037a-5475-42fa-a387-d65c80246080\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"a4e9cdea-4fc5-4e3d-b3e8-7ece2862611b\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"ad53c867-6255-41e4-aa4d-5f8ac7dfee6d\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"8a8695d0-9ff0-4bba-a4b1-92672e8063ce\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"90732377-4a3c-4eaa-8da9-f81e910b3fab\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"b85d92b7-5902-4caa-abcb-107f742bf218\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"bfe3e7cd-a4d2-4d23-b3ee-db7fe56ccf9d\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"79f6dad0-832b-4b24-aa7d-51d659848aab\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"7af518c9-ad7d-4b0c-8521-d01bad26a443\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"044628bc-b683-47d9-a371-075296b0b7a0\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"5a02d3fa-fac1-461d-92fe-f8163f9d14c1\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"2f70be9d-e1e6-42bf-831f-fc49508bbfc5\",\"type\":\"GROUP\",\"permission\":\"VIEW\"},{\"id\":\"50cd9b5f-53fa-46d9-8137-cee7d9cb02f0\",\"type\":\"GROUP\",\"permission\":\"EDIT\"},{\"id\":\"b144a630-5775-47d1-9232-6cd5b54da6c7\",\"type\":\"GROUP\",\"permission\":\"EDIT\"}],\"publicAccess\":{\"managementZoneIds\":[],\"urls\":{}}}"

Please Kenny let me know if helps you or we can have a talk.

Re: IAM Policy to allow users (Power Users) to manage all classic Dashboards

Kenny_Gillette — Wed, 27 Mar 2024 13:16:01 GMT

Awesome, thanks. We will review and if questions, will let you know. Really appreciate it.

Re: IAM Policy to allow users (Power Users) to manage all classic Dashboards

Theodore_x86 — Fri, 13 Feb 2026 14:14:11 GMT

Hello.

What would be the exact IAM policy to have read access to all classic pages (hosts classic, services classic, dashboards classic etc.)

Pro user and Standard user do not have access to classic pages, only the admin.