Manage IAM policies

How-to guide
7-min read

Use these procedures in the Dynatrace web UI to manage Dynatrace IAM policies.

API alternative

To instead use the API to manage IAM policies, go to Cluster API v2.

List IAM policies

To list configured IAM policies

In the Cluster Management Console, go to User authentication > Policy management.
Review the table of all existing policies that you can bind to user groups.
- Policy—the name of the policy
- Policy description—a brief description of the policy
- Organizational level—global, cluster, or environment
- Actions—view, edit, or delete that row's policy (actions available to you depend on your permission level)

Default policies

To let you use policies right away, Dynatrace IAM is shipped with built-in global policies.

On the Policies page, in the Source column, they're all set to Dynatrace
They're predefined and managed by Dynatrace
You can apply a built-in policy by assigning it to a group for the whole account or to any environment.
You can inspect them—select View policy in the Actions column—but you can't edit them

Create a policy

To create a policy

In the Cluster Management Console, go to User authentication > Policy management.
Select Add policy.
Enter the following information.

Services

For a complete and up-to-date list of Dynatrace services that support permission management via IAM policies, see IAM policy reference.

Edit a policy

To edit an existing policy

In the Cluster Management Console, go to User authentication > Policy management.
Find the policy you want to edit.
You can filter and sort the table.
Select Actions > Edit policy.
Make your changes and select Save.

Delete a policy

To delete a policy

In the Cluster Management Console, go to User authentication > Policy management.
Find the policy you want to delete.
You can filter and sort the table.
Select the Edit button for the policy.
Select Delete policy.

The change takes effect in a few minutes.

To change the delay, modify property policyRefreshIntervalSeconds in the iam section of the config file.

Copy a policy

To copy an existing policy

In the Cluster Management Console, go to User authentication > Policy management.
Open an existing policy for editing.
Copy the contents of Policy statements to the clipboard.
Go back to the Policy management page.
Select Add policy.
Paste the copied policy statements into Policy statements.
Fill in the Name and optional Description.
Select Save.

Apply a policy to a group

To apply a policy to a group, you need to bind the policy to the group. For details on managing group permissions with IAM, see Working with policies.