Manage group permissions with IAM policies

Use these procedures in the Dynatrace web UI to manage group permissions with IAM policies.

API alternative

To instead use the API to manage group permissions with IAM policies, go to Dynatrace Account Management API 1.0

List all policies bound to a group

  1. Go to Account Management > Identity & access management > Groups.
  2. Find the group in the table and, in the Actions column, select > View group.
  3. On the Group details page, scroll down to the Policies section to see the Account policies and Environment policies.

Because these policies are bound to the group, they apply to every user that is a member of the group.

Add or remove group policies

To add (bind) or remove (unbind) group policies

  1. Go to Account Management > Identity & access management > Groups.

  2. Find the group in the table and, in the Actions column, select > View group.

  3. In the Policies section of the Group details page, select the edit link to display the Edit group policies page.

    There are two expandable lists:

    • Account policies
    • Environment policies—You can filter this list by environment name

  4. Select or clear checkboxes as needed to add or remove account and environment policies for the group.

  5. Select Save.