Resolve effective permissions

• Latest Dynatrace
• Reference
• Published Oct 13, 2026

Resolve whether the caller has requested permissions in Dynatrace with the Platform Management API, using optional context for conditional results.

Overview

One of the following scopes is required:

This endpoint resolves whether the caller (based on the provided OAuth token when calling this endpoint) has the requested permissions (see IAM policy reference for a list of permissions and their conditions). It resolves the permission via IAM and uses the optional context to evaluate conditional results. The provided context consists of key-value pairs where the key must correspond to the name of a supported condition of the requested permission and the value is the value that it this condition is evaluated against given a user's policies.

For each requested permission the response indicates whether the user has the requested permission ("granted": "true"), does not have it ("granted": "false") or only has it conditionally ("granted": "condition"), meaning that the provided values for conditions in the context are not sufficient to decide whether the caller has the permission.

For environment API v2 scopes (i.e. scopes starting with environment-api:) roles on the environment and management zone level will also be considered.

ℹ️ Settings permission requests for scopes settings:schemas:read, settings:objects:read, and settings:objects:write will always result in a result with "granted": "condition". You can use the dedicated effective permissions endpoint for settings instead.

ℹ️ Apps must list all permissions they check in the list of scopes in their app configuration.

You can learn more about querying user permissions on Dynatrace Developer.

Authentication

To execute this request, you need a platform token or OAuth access token with one of the following scopes:

To learn how to obtain and use it, see Tokens and authentication.

Parameters

{
  "permissions": [
    {
      "permission": "state:app-states:write",
      "context": [
        {
          "key": "shared:app-id",
          "value": "dynatrace.notebooks"
        }
      ]
    }
  ]
}

Response