Dynatrace permissions are structured across three levels:
Permissions are cumulative and are assigned in Account Management > Identity & access management. For a detailed view, see Working with policies.