# Account-level permissions separated in the Group definition **URL:** \ **Category:** Open Q&A\ **Tags:** installation, account-management, user-management, data-privacy-and-product-security\ **Created:** [May 1, 2025, 7:26am UTC](https://community.dynatrace.com/t/account-level-permissions-separated-in-the-group-definition/51452 "2025-05-01T07:26:19Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![henk\_stobbe](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/henk_stobbe/32/30434_2.png) [@henk\_stobbe](https://community.dynatrace.com/u/henk_stobbe)\ **Post date:** [May 1, 2025, 7:26am UTC](https://community.dynatrace.com/t/account-level-permissions-separated-in-the-group-definition/51452/1 "2025-05-01T07:26:19Z")
Hello, Account-level permissions definitions are defined separate, in a Group, I assume this is needed when no policies exist yet, to get started. Also if all policies are deleted with the account management rights, there will always be way to rebuild? So I assume a best practice will always be to use policies in all other cases? KR Henk ---
**Author:** ![yanezza](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/yanezza/32/5036_2.png) [@yanezza](https://community.dynatrace.com/u/yanezza)\ **Post date:** [May 7, 2025, 7:55pm UTC](https://community.dynatrace.com/t/account-level-permissions-separated-in-the-group-definition/51452/2 "2025-05-07T19:55:26Z")
Hi, you cannot delete Dynatrace default Policies, so with a Group that included Admin Pro Policies you will be alsway be able to manage it. ---
**Author:** ![henk\_stobbe](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/henk_stobbe/32/30434_2.png) [@henk\_stobbe](https://community.dynatrace.com/u/henk_stobbe)\ **Post date:** [May 8, 2025, 5:21am UTC](https://community.dynatrace.com/t/account-level-permissions-separated-in-the-group-definition/51452/3 "2025-05-08T05:21:42Z")
Great addition thanks!