Dynatrace default groups reference

Latest Dynatrace
Reference
2-min read

Dynatrace offers a default set of editable user groups for both account-level and environment-level access. These pre-configured default user groups reflect common access patterns.

You can grant access to the Dynatrace environment from one of the following three environment groups. Adding users to these groups grants them access to every environment in your account.

Environment Users – Basic read access
Environment Professionals – Advanced feature access
Environment Admins – Full environment control

You can grant access to the Dynatrace account management by adding them to the following account groups.

Account Admins – Full account-level access
Account Viewers – Read-only access to account-level data

Group creation

If your account was created before October 2024, you might see different default groups.

Dynatrace default groups

Dynatrace offers the following user groups with environment and account permissions.

User group	Permissions
Environment Users	Basic access to Dynatrace in all environments of the account. Default policies: Standard User Read Entities Read Events Read Metrics Read Logs Read Spans Read User Sessions
Environment Professionals	Access to advanced features in all environments of the account. Default policies: Pro User Read Entities Read Events Read Metrics Read Logs Read Spans Read User Sessions
Environment Admins	Full access to all functions in all environments of the account. Default policies: Admin User Data Processing and Storage All Grail data read access
Account Admins	Has full account access. Can view and edit company data, enter credit card data, review invoices, create and edit groups, and add users to groups. It also has access to environmental consumption data, documentation, and support.
Account viewers	Has access to environment consumption data, Documentation, and Support. No access to credit card data, invoices, or company/billing address info. Can’t edit groups or assign users to groups.