topic Re: "Environment token management tokens" vs "Cluster tokens" in Dynatrace Managed Q&A

"Environment token management tokens" vs "Cluster tokens"

waikeat_chan — Wed, 10 Mar 2021 06:59:05 GMT

Still don't understand much after reading documentation.

What is/are the difference between them?

Best Regards,

Wai Keat

Re: "Environment token management tokens" vs "Cluster tokens"

Babar_Qayyum — Wed, 19 Mar 2025 11:45:50 GMT

Hello @waikeat_chan

Environment API tokens are specific to a particular environment, whereas, the cluster API tokens manage the cluster even containing more than one environment especially in the case of Dynatrace Managed.

Cluster API v1

Regards,

Babar

Re: "Environment token management tokens" vs "Cluster tokens"

Radoslaw_Szulgo — Wed, 19 Mar 2025 11:46:53 GMT

Thank you very much for your post! Indeed we need to extend and update our documentation page:

Cluster API v1

In particular:

Environment token management tokens - is the token to authenticate with Cluster API v2 /environments/{id}/tokenManagementToken endpoint. It allows you to create a token with TokenManagement scope for a specified environment. It can be helpful if you need to start automation of many environments and generate respective tokens. Token is valid 24h due to its power and security impact if it gets leaked.
Cluster token - is a token that you use to interact with Cluster API v1 or Cluster API v2 - so cluster context.

Re: "Environment token management tokens" vs "Cluster tokens"

tarjei — Tue, 03 Jan 2023 15:00:37 GMT

Is there a way to get to the same functionality as the Environment token management token, but something that does not invalidate after 24hrs?

We would like to have a job which runs every 24 hours and syncs all 350 environment tokens for other automation.

Re: "Environment token management tokens" vs "Cluster tokens"

Radoslaw_Szulgo — Wed, 04 Jan 2023 12:38:59 GMT

Yes, you can override that 24h expiration time by using AP. If you use "0" days it doesn't expire:

curl -X POST "https://cluster-host/api/cluster/v2/tokens" -H "accept: application/json; charset=utf-8" -H "Authorization: Api-Token dt0c01.token" -H "Content-Type: application/json; charset=utf-8" -d "{\"name\":\"my-token-name\",\"expiresIn\":{\"value\":0,\"unit\":\"DAYS\"},\"scopes\":[\"EnvironmentTokenManagement\"]}"

Re: "Environment token management tokens" vs "Cluster tokens"

tarjei — Wed, 04 Jan 2023 12:52:07 GMT

Hi!
Is this documented anywhere? Which access rights does the api user performing this require?

Re: "Environment token management tokens" vs "Cluster tokens"

Radoslaw_Szulgo — Wed, 19 Mar 2025 11:48:00 GMT

Yes - see available scopes:

Create new Cluster token