builtin:management-zones)Management zones enable defining fine grained access rights to parts of an environment. A Management zone consists of a set of entities like applications, hosts, process groups, or services.
For each Management zone you can define which user groups have access to them. This way you can ensure the confidentiality of certain parts of an environment and still keep an end to end view across all components for the users that need it.
For value suggestions based on entity data and preview functionality, environment-wide "Access environment" permission is required.
Management zone rules are executed periodically in the background, for a limited timeframe. Any entity that matches a management zone rule will receive the specific zone assigned to it, while removing zones from entities that no longer match. Be aware that for any condition that requires the relationship between multiple entities, all entities in this scope need to be present in this timeframe!
Depending on environment-size, rule count (Management zones, as well as tagging and naming rules) and rule complexity, the application of all management zones might be delayed!
builtin:management-zonesgroup:management-zonesgroup:preferencesenvironment| GET | Managed | https://{your-domain}/e/{your-environment-id}/api/v2/settings/schemas/builtin:management-zones |
| SaaS | https://{your-environment-id}.live.dynatrace.com/api/v2/settings/schemas/builtin:management-zones | |
| Environment ActiveGate | https://{your-activegate-domain}/e/{your-environment-id}/api/v2/settings/schemas/builtin:management-zones |
To execute this request, you need an access token with Read settings (settings.read) scope. To learn how to obtain and use it, see Tokens and authentication.
nameBe careful when renaming - if there are policies that are referencing this Management zone, they will need to be adapted to the new name!
descriptionRule objectenabledtypeMEDIMENSIONSELECTORentitySelectorThe documentation of the entity selector can be found here.
ManagementZoneAttributeRule objectentityTypeSERVICEPROCESS_GROUPHOSTCUSTOM_DEVICEESXI_HOSTCUSTOM_DEVICE_GROUPHOST_GROUPDATA_CENTER_SERVICEQUEUEWEB_APPLICATIONENTERPRISE_APPLICATIONMOBILE_APPLICATIONCUSTOM_APPLICATIONBROWSER_MONITOREXTERNAL_MONITORHTTP_MONITORNETWORK_AVAILABILITY_MONITORAPPMON_SERVERAPPMON_SYSTEM_PROFILEAWS_ACCOUNTAWS_CLASSIC_LOAD_BALANCERAWS_RELATIONAL_DATABASE_SERVICEAWS_AUTO_SCALING_GROUPAWS_APPLICATION_LOAD_BALANCERAWS_NETWORK_LOAD_BALANCEROPENSTACK_ACCOUNTKUBERNETES_CLUSTERKUBERNETES_SERVICECLOUD_APPLICATION_NAMESPACECLOUD_APPLICATIONCLOUD_FOUNDRY_FOUNDATIONAZUREserviceToHostPropagationserviceToPGPropagationpgToHostPropagationpgToServicePropagationhostToPGPropagationcustomDeviceGroupToCustomDevicePropagationazureToServicePropagationazureToPGPropagationDimensionRule objectappliesToANYLOGMETRICAttributeCondition objectkeySERVICE_AKKA_ACTOR_SYSTEMSERVICE_DATABASE_HOST_NAMESERVICE_DATABASE_NAMESERVICE_DATABASE_TOPOLOGYSERVICE_DATABASE_VENDORSERVICE_DETECTED_NAMESERVICE_ESB_APPLICATION_NAMESERVICE_IBM_CTG_GATEWAY_URLSERVICE_CTG_SERVICE_NAMESERVICE_MESSAGING_LISTENER_CLASS_NAMESERVICE_PUBLIC_DOMAIN_NAMESERVICE_REMOTE_ENDPOINTSERVICE_REMOTE_SERVICE_NAMESERVICE_NAMESERVICE_PORTSERVICE_TAGSSERVICE_TOPOLOGYSERVICE_TYPESERVICE_TECHNOLOGYSERVICE_TECHNOLOGY_EDITIONSERVICE_TECHNOLOGY_VERSIONSERVICE_WEB_APPLICATION_IDSERVICE_WEB_CONTEXT_ROOTSERVICE_WEB_SERVER_ENDPOINTSERVICE_WEB_SERVER_NAMESERVICE_WEB_SERVICE_NAMESERVICE_WEB_SERVICE_NAMESPACEPROCESS_GROUP_AZURE_HOST_NAMEPROCESS_GROUP_AZURE_SITE_NAMECLOUD_FOUNDRY_ORG_NAMEPROCESS_GROUP_CUSTOM_METADATAPROCESS_GROUP_DETECTED_NAMEDOCKER_CONTAINER_NAMEDOCKER_FULL_IMAGE_NAMEDOCKER_IMAGE_VERSIONPROCESS_GROUP_LISTEN_PORTPROCESS_GROUP_PREDEFINED_METADATAPROCESS_GROUP_IDPROCESS_GROUP_NAMEPROCESS_GROUP_TAGSPROCESS_GROUP_TECHNOLOGYPROCESS_GROUP_TECHNOLOGY_EDITIONPROCESS_GROUP_TECHNOLOGY_VERSIONHOST_AIX_LOGICAL_CPU_COUNTHOST_AIX_SIMULTANEOUS_THREADSHOST_AIX_VIRTUAL_CPU_COUNTEC2_INSTANCE_AMI_IDAWS_AVAILABILITY_ZONE_NAMEEC2_INSTANCE_AWS_INSTANCE_TYPEHOST_AWS_NAME_TAGEC2_INSTANCE_AWS_SECURITY_GROUPHOST_ARCHITECTUREHOST_AZURE_SKUAZURE_VM_NAMEHOST_AZURE_COMPUTE_MODEAZURE_REGION_NAMEAZURE_SCALE_SET_NAMEHOST_AZURE_WEB_APPLICATION_HOST_NAMESHOST_AZURE_WEB_APPLICATION_SITE_NAMESHOST_BOSH_AVAILABILITY_ZONEHOST_BOSH_DEPLOYMENT_IDHOST_BOSH_INSTANCE_IDHOST_BOSH_INSTANCE_NAMEHOST_BOSH_STEMCELL_VERSIONEC2_INSTANCE_BEANSTALK_ENV_NAMEHOST_BITNESSHOST_BOSH_NAMEHOST_CPU_CORESHOST_CLOUD_TYPEHOST_CUSTOM_METADATAHOST_DETECTED_NAMEEC2_INSTANCE_IDEC2_INSTANCE_NAMEEC2_INSTANCE_TAGSOPENSTACK_REGION_NAMEGOOGLE_CLOUD_PLATFORM_ZONE_NAMEGOOGLE_COMPUTE_INSTANCE_IDGOOGLE_COMPUTE_INSTANCE_MACHINE_TYPEGOOGLE_COMPUTE_INSTANCE_NAMEGOOGLE_COMPUTE_INSTANCE_PROJECTGOOGLE_COMPUTE_INSTANCE_PROJECT_IDGOOGLE_COMPUTE_INSTANCE_PUBLIC_IP_ADDRESSESHOST_IP_ADDRESSHOST_GROUP_IDHOST_GROUP_NAMEHOST_NAMEHOST_TAGSHOST_HYPERVISOR_TYPEKUBERNETES_CLUSTER_NAMEHOST_LOGICAL_CPU_CORESHOST_OS_TYPEHOST_OS_VERSIONHOST_ONEAGENT_CUSTOM_HOST_NAMEGEOLOCATION_SITE_NAMEOPENSTACK_VM_NAMEOPENSTACK_AVAILABILITY_ZONE_NAMENAME_OF_COMPUTE_NODEOPENSTACK_VM_INSTANCE_TYPEOPENSTACK_PROJECT_NAMEOPENSTACK_VM_SECURITY_GROUPHOST_PAAS_MEMORY_LIMITHOST_PAAS_TYPEEC2_INSTANCE_PRIVATE_HOST_NAMEEC2_INSTANCE_PUBLIC_HOST_NAMEHOST_TECHNOLOGYVMWARE_DATACENTER_NAMEVMWARE_VM_NAMECUSTOM_DEVICE_DNS_ADDRESSCUSTOM_DEVICE_IP_ADDRESSCUSTOM_DEVICE_NAMECUSTOM_DEVICE_PORTCUSTOM_DEVICE_TAGSCUSTOM_DEVICE_METADATACUSTOM_DEVICE_TECHNOLOGYCUSTOM_DEVICE_GROUP_NAMECUSTOM_DEVICE_GROUP_TAGSDATA_CENTER_SERVICE_METADATADATA_CENTER_SERVICE_IP_ADDRESSDATA_CENTER_SERVICE_DECODER_TYPEDATA_CENTER_SERVICE_NAMEDATA_CENTER_SERVICE_PORTDATA_CENTER_SERVICE_TAGSWEB_APPLICATION_NAMEWEB_APPLICATION_NAME_PATTERNWEB_APPLICATION_TAGSWEB_APPLICATION_TYPEMOBILE_APPLICATION_NAMEMOBILE_APPLICATION_PLATFORMMOBILE_APPLICATION_TAGSENTERPRISE_APPLICATION_METADATAENTERPRISE_APPLICATION_IP_ADDRESSENTERPRISE_APPLICATION_DECODER_TYPEENTERPRISE_APPLICATION_NAMEENTERPRISE_APPLICATION_PORTENTERPRISE_APPLICATION_TAGSBROWSER_MONITOR_NAMEBROWSER_MONITOR_TAGSEXTERNAL_MONITOR_ENGINE_DESCRIPTIONEXTERNAL_MONITOR_ENGINE_NAMEEXTERNAL_MONITOR_ENGINE_TYPEEXTERNAL_MONITOR_NAMEEXTERNAL_MONITOR_TAGSHTTP_MONITOR_NAMEHTTP_MONITOR_TAGSNETWORK_AVAILABILITY_MONITOR_NAMENETWORK_AVAILABILITY_MONITOR_TAGSCUSTOM_APPLICATION_NAMECUSTOM_APPLICATION_PLATFORMCUSTOM_APPLICATION_TAGSCUSTOM_APPLICATION_TYPEAWS_ACCOUNT_IDAWS_ACCOUNT_NAMEAWS_CLASSIC_LOAD_BALANCER_FRONTEND_PORTSAWS_CLASSIC_LOAD_BALANCER_NAMEAWS_CLASSIC_LOAD_BALANCER_TAGSAWS_RELATIONAL_DATABASE_SERVICE_DB_NAMEAWS_RELATIONAL_DATABASE_SERVICE_ENDPOINTAWS_RELATIONAL_DATABASE_SERVICE_ENGINEAWS_RELATIONAL_DATABASE_SERVICE_INSTANCE_CLASSAWS_RELATIONAL_DATABASE_SERVICE_NAMEAWS_RELATIONAL_DATABASE_SERVICE_PORTAWS_RELATIONAL_DATABASE_SERVICE_TAGSAWS_AUTO_SCALING_GROUP_NAMEAWS_AUTO_SCALING_GROUP_TAGSOPENSTACK_ACCOUNT_NAMEOPENSTACK_ACCOUNT_PROJECT_NAMEESXI_HOST_CLUSTER_NAMEESXI_HOST_NAMEESXI_HOST_TAGSESXI_HOST_HARDWARE_MODELESXI_HOST_HARDWARE_VENDORESXI_HOST_PRODUCT_NAMEESXI_HOST_PRODUCT_VERSIONAPPMON_SERVER_NAMEAPPMON_SYSTEM_PROFILE_NAMECLOUD_FOUNDRY_FOUNDATION_NAMEAWS_APPLICATION_LOAD_BALANCER_NAMEAWS_APPLICATION_LOAD_BALANCER_TAGSAWS_NETWORK_LOAD_BALANCER_NAMEAWS_NETWORK_LOAD_BALANCER_TAGSCLOUD_APPLICATION_NAMESPACE_LABELSCLOUD_APPLICATION_NAMESPACE_NAMECLOUD_APPLICATION_LABELSCLOUD_APPLICATION_NAMEKUBERNETES_SERVICE_NAMEAZURE_MGMT_GROUP_UUIDAZURE_MGMT_GROUP_NAMEAZURE_ENTITY_NAMEAZURE_SUBSCRIPTION_UUIDAZURE_SUBSCRIPTION_NAMEAZURE_ENTITY_TAGSAZURE_TENANT_UUIDAZURE_TENANT_NAMEHOST_KUBERNETES_LABELSKUBERNETES_NODE_NAMEQUEUE_NAMEQUEUE_VENDORQUEUE_TECHNOLOGYdynamicKeySourcedynamicKeyoperatorEQUALSNOT_EQUALSEXISTSNOT_EXISTSBEGINS_WITHNOT_BEGINS_WITHCONTAINSNOT_CONTAINSENDS_WITHNOT_ENDS_WITHGREATER_THANNOT_GREATER_THANGREATER_THAN_OR_EQUALNOT_GREATER_THAN_OR_EQUALLOWER_THANNOT_LOWER_THANLOWER_THAN_OR_EQUALNOT_LOWER_THAN_OR_EQUALTAG_KEY_EQUALSNOT_TAG_KEY_EQUALSIS_IP_IN_RANGENOT_IS_IP_IN_RANGEREGEX_MATCHESNOT_REGEX_MATCHESenumValuestringValuecaseSensitiveintegerValueentityIdtagFormat: [CONTEXT]tagKey:tagValue
DimensionCondition objectconditionTypeDIMENSIONLOG_FILE_NAMEMETRIC_KEYkeyruleMatcherBEGINS_WITHEQUALSvalue