Grant Access to Dynatrace Environment API for Specific User Group

[GerardoAud]

Hi all,

I am currently managing access controls within our Dynatrace setup and have a question regarding the Dynatrace Environment API.

I would like to grant access to a specific group of users through a policy. Is there a way to define a policy statement to specify access to the Dynatrace Environment API?

Thank you for your assistance!

[Peter_Youssef]

Hi @GerardoAud 

You have two options:

1. The first option through the CMC UI directly > Home > Users > Policy management.

Here is the policy statement as an example you can tailor it as per your requirements:

ALLOW settings:objects:write, settings:objects:read, settings:scheamas:write, WHERE settings:schemaId = "Environment API v2";

• you can get the schema id from the rest Api as well.

  2. Through the rest Api, create access token with "ServiceProviderAPI" scope > under API v2 

Then

• create a policy and then will bind the policy with the below post Api under Cluster API v2 > IAM - policy bindings

If you need to get the current schemas > Environment API V2.

@GerardoAud I'm sure you will do it better than described, keep us posted Pro.

Regards,

Peter.