# \#iam **URL:** https://community.dynatrace.com/tag/iam/574.md [Latest](https://community.dynatrace.com/latest.md) · [Categories](https://community.dynatrace.com/categories.md) · [Tags](https://community.dynatrace.com/tags.md) --- ## [When are Davis Anomaly Detectors going to receive more granular permissions?](https://community.dynatrace.com/t/when-are-davis-anomaly-detectors-going-to-receive-more-granular-permissions/57059)
**Author:** [@ssipes](https://community.dynatrace.com/u/ssipes)\ **Replies:** 1\ **Last updated:** [October 1, 2026, 7:37pm UTC](https://community.dynatrace.com/t/when-are-davis-anomaly-detectors-going-to-receive-more-granular-permissions/57059 "2026-10-01T19:37:26Z")
With metric events we were able to restrict access through management zones. A user could only edit or create metric events within the management zones they had access to. Currently access to Davis Anomaly Detector (Cu… --- ## [Admin User Permissions Not Inclusive of All Permissions](https://community.dynatrace.com/t/admin-user-permissions-not-inclusive-of-all-permissions/55872)
**Author:** [@mmevanson](https://community.dynatrace.com/u/mmevanson)\ **Replies:** 4\ **Last updated:** [May 12, 2026, 3:56pm UTC](https://community.dynatrace.com/t/admin-user-permissions-not-inclusive-of-all-permissions/55872 "2026-05-12T15:56:09Z")
Hello Community, Can anyone explain to me why the Admin User Permission isn’t inclusive of every single permission needed to run the platform? The frustrating one is that you can’t even create storage buckets with the … --- ## [Monaco account command: unable to update a group (HTTP 400) {\\"error\\":true,\\"payload\\":null,\\"message\\":\\"Cannot modify SCIM grou](https://community.dynatrace.com/t/monaco-account-command-unable-to-update-a-group-http-400-error-true-payload-null-message-cannot-modify-scim-grou/55363)
**Author:** [@erh\_inetum](https://community.dynatrace.com/u/erh_inetum)\ **Replies:** 3\ **Last updated:** [March 26, 2026, 7:05am UTC](https://community.dynatrace.com/t/monaco-account-command-unable-to-update-a-group-http-400-error-true-payload-null-message-cannot-modify-scim-grou/55363 "2026-03-26T07:05:16Z")
Hi, I’m trying to assign policies and boundaries for many groups using Monaco The groups were deployed in Account Management using SCIM and now we’re trying to assign policies and boundaries to each group using Monaco. … --- ## [Limited visibility vs agent-install policy ?](https://community.dynatrace.com/t/limited-visibility-vs-agent-install-policy/50057)
**Author:** [@josef\_solnicky](https://community.dynatrace.com/u/josef_solnicky)\ **Replies:** 1\ **Last updated:** [February 9, 2026, 9:44pm UTC](https://community.dynatrace.com/t/limited-visibility-vs-agent-install-policy/50057 "2026-02-09T21:44:52Z")
Hello, I was trying to define limited access to environment entities/MZs for different DEV teams AND adding OneAgent installation screen (e.g. for AWS Lambda) for the same user group. BUT no success via RBAC and no suc… --- ## [Monaco for account management](https://community.dynatrace.com/t/monaco-for-account-management/53080)
**Author:** [@masterman](https://community.dynatrace.com/u/masterman)\ **Replies:** 1\ **Last updated:** [September 17, 2025, 3:33pm UTC](https://community.dynatrace.com/t/monaco-for-account-management/53080 "2025-09-17T15:33:20Z")
Hello, I’m trying to have the account management in code using Monaco. I’m struggling with two questions and hopefully someone has the answer. - Is there a way to set permissions to service users? - Is there a way to… --- ## [How do you bind “Segments” (saved filters) to IAM/RBAC policies?](https://community.dynatrace.com/t/how-do-you-bind-segments-saved-filters-to-iam-rbac-policies/53352)
**Author:** [@JonhBk201](https://community.dynatrace.com/u/JonhBk201)\ **Replies:** 4\ **Last updated:** [September 15, 2025, 6:08pm UTC](https://community.dynatrace.com/t/how-do-you-bind-segments-saved-filters-to-iam-rbac-policies/53352 "2025-09-15T18:08:42Z")
We want Group A to use only Segments S1 and S2—and see only that data. They should not see or find any other Segments. Is this supported? If yes, how do we configure it (permissions/settings/API)? A short example would h… --- ## [Using IAM policies to only RUN, not EDIT notebooks](https://community.dynatrace.com/t/using-iam-policies-to-only-run-not-edit-notebooks/47214)
**Author:** [@marina\_pollehn](https://community.dynatrace.com/u/marina_pollehn)\ **Replies:** 3\ **Last updated:** [July 21, 2025, 7:59pm UTC](https://community.dynatrace.com/t/using-iam-policies-to-only-run-not-edit-notebooks/47214 "2025-07-21T19:59:58Z")
Hi all, I want some users to be able to use my notebook (so also run it when they need to) but I do not want them to have edit rights to create own notebooks or remove something in my notebook. Is this possible with an I… --- ## [Security on Metrics - SaaS - Possible?](https://community.dynatrace.com/t/security-on-metrics-saas-possible/51062)
**Author:** [@stevene1900](https://community.dynatrace.com/u/stevene1900)\ **Replies:** 3\ **Last updated:** [April 6, 2025, 12:18am UTC](https://community.dynatrace.com/t/security-on-metrics-saas-possible/51062 "2025-04-06T00:18:43Z")
Hello, we have an Logs OpenPipeline where we extract metrics. In this pipeline we also set a security context and send the logs to a dedicated Logs Storage Bucket. We have been asked to limit access to these logs, whic… --- ## [How to (easily) deny access for bucket containing secure data ?](https://community.dynatrace.com/t/how-to-easily-deny-access-for-bucket-containing-secure-data/49216)
**Author:** [@josef\_solnicky](https://community.dynatrace.com/u/josef_solnicky)\ **Replies:** 6\ **Last updated:** [March 17, 2025, 2:40pm UTC](https://community.dynatrace.com/t/how-to-easily-deny-access-for-bucket-containing-secure-data/49216 "2025-03-17T14:40:49Z")
We created log bucket for secure data + Allow policy for special group - but probably because of default policy “Storage Logs Read” - anyboddy still can access those logs. Cannot find any example in Docs. Is there any … --- ## [Is it possible to manage policy boundaries using API?](https://community.dynatrace.com/t/is-it-possible-to-manage-policy-boundaries-using-api/48982)
**Author:** [@panumjp](https://community.dynatrace.com/u/panumjp)\ **Replies:** 5\ **Last updated:** [November 21, 2024, 8:12am UTC](https://community.dynatrace.com/t/is-it-possible-to-manage-policy-boundaries-using-api/48982 "2024-11-21T08:12:29Z")
Is it possible? Policy boundaries: --- ## [What does document:environment-shares:claim actually do?](https://community.dynatrace.com/t/what-does-documentclaim-actually-do/48978)
**Author:** [@marina\_pollehn](https://community.dynatrace.com/u/marina_pollehn)\ **Replies:** 2\ **Last updated:** [November 20, 2024, 10:00am UTC](https://community.dynatrace.com/t/what-does-documentclaim-actually-do/48978 "2024-11-20T10:00:48Z")
Hi all :), Usually all the iam policies are quite clear but for the document:environment-shares:claim policy it is a bit unclear to me what it does. Is it 1) to change ownership? So that I can become the owner of someo… --- ## [Settings 1.0, 2.0 and some settings are on neither?](https://community.dynatrace.com/t/settings-1-0-2-0-and-some-settings-are-on-neither/43078)
**Author:** [@Kenny\_Gillette](https://community.dynatrace.com/u/Kenny_Gillette)\ **Replies:** 3\ **Last updated:** [February 15, 2024, 8:03am UTC](https://community.dynatrace.com/t/settings-1-0-2-0-and-some-settings-are-on-neither/43078 "2024-02-15T08:03:10Z")
Dynatrace, How long has it been since you introduced Settings 2.0? Seems to be at least 2 years based off this blog. Dynatrace Blog | Dynatrace news..\_ga\_1MEMV02JXVMTcwMTk1MjI2My4yODUuMS4xNzAxOTUyOTAzLjAuMC4w When wil… --- ## [Document all settings for Settings 2.0/Power User access](https://community.dynatrace.com/t/document-all-settings-for-settings-2-0-power-user-access/43016)
**Author:** [@Kenny\_Gillette](https://community.dynatrace.com/u/Kenny_Gillette)\ **Replies:** 4\ **Last updated:** [January 4, 2024, 12:05pm UTC](https://community.dynatrace.com/t/document-all-settings-for-settings-2-0-power-user-access/43016 "2024-01-04T12:05:49Z")
Hi team, I am actively working on Power Users IAM Policy. Has anybody documented all settings if on 1.0 or 2.0 for settings? Something like below? I will need to document all settings on: what is 1.0 vs 2.0, group id…