Monaco API support and access permission handling

• Latest Dynatrace
• Reference
• 1-min read
• Updated on Mar 18, 2026

Dynatrace offers different options to authenticate API calls. Dynatrace Monaco supports the following authentication options:

For details about Dynatrace Identity and Access Management (including platform tokens,API tokens, and OAuth clients), see Tokens and OAuth clients.

Create a platform token for the Dynatrace Monaco CLI

To create a platform token, follow the steps described in Create a platform token for the Dynatrace Monaco CLI. Each available type of platform configuration requires specific OAuth scopes.

Create an OAuth client for the Dynatrace Monaco CLI

To create an OAuth client, follow the steps described in Create an OAuth2 client.

Each available type of platform configuration requires specific OAuth scopes.

In addition to the scopes available to the OAuth client, permissions can be further limited via policies applied to the user's groups.

When working with a service user, ensure the service user's permissions match the OAuth scopes for all environments. For details on how permissions can be controlled, see Working with policies.

To use your OAuth client:

API coverage

Dynatrace Monaco supports the following configuration types:

The specific configuration types are defined in the Monaco configuration YAML file.

Settings 2.0

The Dynatrace Monaco CLI provides general support for any Settings 2.0 schema available in your environment. For information about schemas, see Settings 2.0 - Available schemas.

For latest Dynatrace, you will need the following OAuth scopes.

For classic Dynatrace, you will need the following OAuth scopes.

Supported platform API types

The Dynatrace platform provides a collection of platform services, each with a specific area of responsibility. OAuth credentials are required to target platform APIs.

The Dynatrace Monaco CLI provides support for Dynatrace platform API types as described in the table below.

Account Management permissions

To manage account resources, such as user management or policy handling, OAuth credentials require the following permissions:

Supported Configuration API types

Configuration via the Configuration API requires an API access token. Dynatrace Monaco CLI provides support for most Configuration APIs, as described in the table below. This table provides: