- last edited on by
Michal_Gebacki
The Dynatrace Group Creation was a manual process that required over 50 steps, we wrote a PowerShell script that uses the Dynatrace APIs to fully automate the process. This script cuts down administrative workload. A saving of +- 5 to 10 man hours per group created.
Value Stream Mapping: Dynatrace Group Creation
| Metric | Old Process (Manual) | New Process (Automated) |
|
Number of Steps |
~50 click/type actions |
1 script execution |
|
Total Lead Time |
~5 hours |
~5–10 minutes |
|
Wait Time |
High (approvals, page loads) |
Near zero (once the AD group is created). |
|
Value-Added Time |
~30% (actual config) |
~95% (script execution) |
|
Error Risk |
High (manual entry) |
Low (validated script) |
|
Repeatability |
Low |
High (idempotent script) |
Flow Comparison:
-
Old process:
Follow the Dynatrace Group Creation checklist (50 steps) → Request an application role in Service Now → Manual AD group creation → Create a new management Zone → Create a new policy → Create a new SAML group → Bind group to Policy→ Assign roles → Validate → Document → Notify
(Multiple handoffs, approvals, and UI navigation) -
New process:
Request an application role in Service Now → Run Dynatrace_Create_Group.ps1 → Script creates AD group, Dynatrace groups, management zones, policy, binds groups to policy, assigns roles and validates → Outputs log
(Single automated flow, no manual clicks)
Impact
-
Time Saved: ~90% reduction (5 hours → <10 minutes)
-
Error Reduction: Eliminated manual typos and missed steps
-
Scalability: Can onboard multiple groups in parallel
-
Auditability: Script logs provide traceability
Featured Posts
