topic Re: Policy replacing "View and manage users and groups (Permissions)" in Open Q&A

Policy replacing "View and manage users and groups (Permissions)"

y_buccellato — Mon, 06 May 2024 13:29:00 GMT

Hello respected community memembers,

in Dynatrace classic permission we can assign to groups:

View and manage users and groups (Permissions)

I' m looking for a way to set up a IAM policy That will split the permission as:

Policy 1: ALLOW View Users and Groups
Policy 2: ALLOW Manage Users and Groups

Is this possible?

Re: Policy replacing "View and manage users and groups (Permissions)"

DanielS — Mon, 29 Apr 2024 19:19:23 GMT

Hi, according to this data, you only have the option to give View and Manage User and Groups permissions, not only view.

https://docs.dynatrace.com/docs/shortlink/account-management-permissions#permissions-table

Re: Policy replacing "View and manage users and groups (Permissions)"

DanielS — Mon, 29 Apr 2024 19:25:18 GMT

But If you do it by API, you can choose the token scope for read or write access only:

Re: Policy replacing "View and manage users and groups (Permissions)"

y_buccellato — Tue, 30 Apr 2024 07:16:41 GMT

My final scope would be to edit groups and assign permission to it, without ever editing the users (or blocking the ability of manually adding users from Dynatrace). That is why I'm looking into the subjects