Limited visibility vs agent-install policy ?

josef_solnicky — Tue, 11 Feb 2025 08:55:48 GMT

Hello,

I was trying to define limited access to environment entities/MZs for different DEV teams AND adding OneAgent installation screen (e.g. for AWS Lambda) for the same user group.
BUT no success via RBAC and no success via IAM polices also.

From DOC:

environment:roles:agent-install
Grants user the Download/install OneAgent permission. Users who have this permission assigned are also able to view monitoring data for all management zones.

This is quite logical -> but limited access AND possibility to give to devops team install options is logical too 🙂

Any idea how to do it ?

BR, Josef S.

Re: Limited visibility vs agent-install policy ?

ChadTurner — Mon, 09 Feb 2026 21:45:24 GMT

Hey @josef_solnicky . When have you tested that permission set? When I tested it today I found that I was able to install the OneAgent via the "Deploy Dynatrace" but when checking out a host I had no ability to edit settings:

topic Re: Limited visibility vs agent-install policy ? in Open Q&A

Limited visibility vs agent-install policy ?

Re: Limited visibility vs agent-install policy ?