Showing results for 
Show  only  | Search instead for 
Did you mean: 
Dynatrace Contributor
Dynatrace Contributor

If you have Network Zones in managed cluster that are not using any ActiveGate's or OneAgent's and if you would like to delete those you can follow below steps : 

  • Network Zone with no ActiveGate or OneAgent looks like below : 


  • If you use Network Zone delete API, you might get  
      "error": {
        "code": 400,
        "message": "Deletion of network zone has to be done via cluster API on this cluster."
  • Or if you try cluster API you might get below error : 
    { "error": { "code": 401, "message": "Token Authentication failed" } }
    This can be if you are missing ServiceProviderAPI scope. And you cant find this scope at tenant level.
  • On Managed clusters Network Zones are cluster wide hence they can not be deleted at tenant/environment level. They have to be deleted at cluster level using Cluster API.
  • To get an API-Token with the ServiceProviderAPI scope, go into the CMC of the Cluster under Settings then to API Tokens. Click on Generate Token under Cluster Token, give it a name and enable ServiceProviderAPI for the access scope.


  • The new generated token should now be able to authenticate for the deletion REST API endpoint for Network Zones. Which you can use to delete the network zone.
  • You can also refer cluster-configuration-token
Version history
Last update:
‎08 May 2023 02:22 PM
Updated by:
DynaMight Legend
DynaMight Legend

@bhushangholap Thank you for sharing this for all out Managed customers!