Dynatrace

Overview

The Dynatrace integration connects your Dynatrace account to Oneleet, syncing account users as user account assets. This lets Oneleet track who has access to your Dynatrace account and which groups they belong to.

What does Oneleet monitor?

• Dynatrace account users (user accounts), including their status and the groups they belong to

Users whose status is inactive, deleted, or blocked are shown as deactivated. Invited users who haven’t signed up yet are shown as active.

Dynatrace’s API doesn’t report whether users have MFA enabled or whether SSO is enforced, so Oneleet can’t check MFA for Dynatrace users. Enforce MFA in your identity provider instead.

Setup

To set up the Dynatrace integration, navigate to Integrations > Add integration > Dynatrace.

Oneleet connects with a Dynatrace OAuth client for the Account Management API. Create it while signed in as a user who can manage users (for example a member of Account Admins).

1. Go to Account Management, open Identity & access management → OAuth clients, and click Create client.
2. Leave Grant type set to Client credentials. For Subject user email, enter the email of an active user who can manage users.
3. In the Permissions section, under Account, check only View users and groups (account-idm-read).
4. Click Create client. Copy the Client ID and Client Secret into the form in Oneleet. Dynatrace shows the secret only once.
5. Copy the whole Dynatrace URN (urn:dtaccount:<uuid>) into the Dynatrace URN field, then click Connect.

The client stops working if it’s deleted or its subject user is deactivated or loses permission to manage users. Reconnect with a new client if that happens.