management Zone

[Gbaweja]

Hello Dynatrace Community,

I am currently learning Dynatrace and facing an issue while trying to create a Management Zone.

Here is my setup and what I have already done:

• I am added to the Account Admin group
• My user has Admin privileges
• I have selected the required Management Zone permissions (checkboxes) under user/group permissions

However, I am still unable to create or manage Management Zones in the environment.

I would like to check

Are there any additional roles or permissions required at the environment level (in addition to Account Admin)?

[MaximilianoML]

Hello, @Gbaweja 

Account Admin alone is usually not enough to create or manage Management Zones inside a Dynatrace environment

There are two different permission layers involved:

Account-level permissions

These allow you to manage users, groups, policies, and account-level access.

Environment-level permissions

These control what you can actually do inside a specific Dynatrace.

For Management Zones, please check that your user or group has the environment-level permission to change monitoring settings, usually shown as something like:

Manage monitoring settings

Or

Change monitoring settings

In IAM/policy-based setups, this is commonly related to:

environment:roles:manage-settings

Management Zone permissions/checkboxes are often used to control access to existing Management Zones, but they may not be enough to allow creating or administering Management Zones globally.

I’d recommend double-checking the permissions assigned to your user group.

Go to Account Management, then Identity & access management, then Group management. Open the group your user belongs to and verify the permissions for the specific Dynatrace environment where you want to create the Management Zone.

In particular, check that the group has Manage monitoring settings or Change monitoring settings enabled for that environment.

After any permission changes, refresh your session or log out and back in.

One important point: make sure the permission is assigned to the correct environment. Having Account Admin privileges does not automatically mean you have full administrative rights inside every Dynatrace environment.