• Home
  • Manage
  • Access control
  • Manage user permissions with IAM policies
  • Manage group permissions with IAM policies

Manage group permissions with IAM policies

Use these procedures in the Dynatrace web UI to manage group permissions with IAM policies.

API alternative

To instead use the API to manage group permissions with IAM policies, go to Dynatrace Account Management API 1.0

List all policies bound to a group

  1. In Account Management, go to Identity & access management > Groups.
  2. Find the group in the table and, in the Actions column, select > View group.
  3. On the Group details page, scroll down to the Policies section to see the Account policies and Environment policies.
  1. In the Cluster Management Console, go to User authentication > User groups.
  2. Find the group in the table and, in the Edit column, select .
  3. On the Group settings page, under Environment permissions and policies, select to see the details of a group.
  4. Select the Policies tab to list and edit policies that are bound to the selected group.

Because these policies are bound to the group, they apply to every user that is a member of the group.

Add or remove group policies

To add (bind) or remove (unbind) group policies

  1. In Account Management, go to Identity & access management > Groups.

  2. Find the group in the table and, in the Actions column, select > View group.

  3. In the Policies section of the Group details page, select the edit link to display the Edit group policies page.

    There are two expandable lists:

    • Account policies
    • Environment policies—You can filter this list by environment name

  4. Select or clear checkboxes as needed to add or remove account and environment policies for the group.

  5. Select Save.

  1. In the Cluster Management Console, go to User authentication > User groups.
  2. Find the group in the table and, in the Edit column, select .
  3. On the Group settings page, under Environment permissions and policies, select to see the details of a group.
  4. On the Policies tab, bind or unbind policies for the selected group.
    • To bind policies, use the filter box to find and select the policies, and then select Bind policies
    • To unbind policies, select Unbind for each of unwanted policy in the Bound policies list.
  5. Select Save changes.

In Dynatrace Managed, policy changes may take a couple of minutes to take effect after you select Save.