I want to provide only OneAgent Enable/Disable access to a QA team. They already have Env Read Only access. How this is possible?

[skanchalwar2]

I want to provide only OneAgent Enable/Disable access to a QA team. They already have Env Read Only access. How this is possible?

[rastislav_danis]

check this api out, actually it's not GA

https://www.dynatrace.com/support/help/dynatrace-api/configuration-api/oneagent-on-host/oneagent-mon...

[ChadTurner · Accepted solution]

If you are a managed user and have AD intrgrated, its quite simple as you can assign them AD groups and roles which will allow certain people to have certain accesses. SaaS customers, its going to be a tad bit harder as youll need saml for AD integration

[JamesKitson · Accepted solution]

For the specific question though, right now you wouldn't be able to do this purely through permissions. Disabling an agent through the UI is considered to be changing monitoring settings so the users would need that level of permissions.

The closest you can likely get at this time is to define management zones that only have the desired host entities in scope. Then you can create a group with change monitoring settings permissions that only has that management zone in scope. Then those users could disable monitoring through the UI by navigating to the settings page for individual hosts. This would also allow them to make any of the changes displayed in that page.