Dynatrace permissions are structured across three levels:
Scope
Role
Capabilities
Account Level
Account Admin / Viewer
View and manage billing, users, subscriptions, and environments.
Environment Level
Environment Admin / Viewer
Access and configure monitoring environments.
Subscription Level
Subscription Admin / Viewer
View consumption, forecasts, and cost allocation across accounts.
Permissions are cumulative and are assigned in Account Management > Identity & access management. For a detailed view, see Working with policies.