What roles and user groups are available?

This topic applies to Dynatrace Managed installations only.

You need to configure user groups in Dynatrace Managed to allow access to your monitoring environment or your Dynatrace Server.

Dynatrace Managed user groups

Cluster administrator

Users assigned to groups with this permission are automatically given administrator access rights for all environments. They have access to your entire Dynatrace Managed monitoring setup. They can manage your monitoring environments and Dynatrace Server. Users assigned to groups with this permission can also:

  • Add new Dynatrace Server nodes
  • Upgrade Dynatrace Server
  • Manage Dynatrace Managed users and user groups
  • Install Dynatrace OneAgent into any monitoring environment
  • Configure monitoring settings for any monitoring environment

When users that have the Cluster admin permission log into Dynatrace Managed, they arrive on the Cluster Management page.

Default administrator account

The default administrator account (admin) that was created during Dynatrace Managed installation exists regardless of the authentication type you select (internal or LDAP). This account has access privileges equal to the Cluster administrator account.

Environment access rights

You need to explicitly assign access rights for each environment manually. If you don’t add an environment to a group, that group’s members will not have access to that environment.

When users that don’t have the Cluster admin permission log into Dynatrace Managed, they arrive on their home dashboard.

Administrators

Users assigned to groups that have Administrators access rights have access to all charts and dashboards within the monitoring environment. They can configure monitoring settings and install Dynatrace OneAgent within the monitoring environment.

Users, Read-only users

Users assigned to the groups with Users or Read-only users access rights have access to all charts and dashboards for the monitoring environment. They can’t configure monitoring settings.

Log analytics permissions

Users assigned to groups that have Log analytics permissions have access to log analytics. Read more about log analytics