Dynatrace permissions are structured across three levels:
| Scope | Role | Capabilities |
|---|---|---|
Account Level | Account Admin / Viewer | View and manage billing, users, subscriptions, and environments. |
Environment Level | Environment Admin / Viewer | Access and configure monitoring environments. |
Subscription Level | Subscription Admin / Viewer | View consumption, forecasts, and cost allocation across accounts. |
Permissions are cumulative and are assigned in Account Management > Identity & access management. For a detailed view, see Working with policies.