Dynatrace SaaS API token scopes may exceed intended integration permissions
Dynatrace SaaS exposes a default public API endpoint that requires token-based authentication. The goal is to confirm whether an API token can be limited to the minimum actions needed for a specific integration without inheriting broader permissions from the associated user role. RBAC roles define permissible actions, but it is unclear whether token scopes a