Editorial question90.4K views780 votes0 answers1,318 following
AI-generatedDynatrace SaaS API token scopes may exceed intended integration permissions
Dynatrace SaaS exposes a default public API endpoint that requires token-based authentication. The goal is to confirm whether an API token can be limited to the minimum actions needed for a specific integration without inheriting broader permissions from the associated user role. RBAC roles define permissible actions, but it is unclear whether token scopes a