Dynatrace synthetic access control lets teams isolate their own monitors

On a shared Dynatrace tenant, a team member can accidentally delete another team's synthetic monitor, leaving gaps in its availability data. Dynatrace's synthetic access control addresses this by letting each team see and edit only its own monitors. The mechanism relies on security contexts, which are labels attached to monitors, combined with IAM policies that restrict Synthetic platform permissions to monitors carrying matching contexts. Classic permissions still apply tenant-wide and are not bounded by contexts, so they must be managed separately to make isolation effective. The article is based on Dynatrace's documentation rather than tested configuration, and it notes that some details, such as where to enter context values in the interface, were not confirmed.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.


Discussion (0)
Log in to join the discussion and vote.
Log in