Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Dynatrace
  4. API Docs
  5. IamPolicyBindingsV2
Viewing docs for Dynatrace v0.36.0
published on Tuesday, Jun 9, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-dynatrace

dynatrace.IamPolicyBindingsV2

dynatrace logo
Viewing docs for Dynatrace v0.36.0
published on Tuesday, Jun 9, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-dynatrace

    Dynatrace SaaS only

    To utilize this resource, please define the environment variables DT_CLIENT_ID, DT_CLIENT_SECRET, DT_ACCOUNT_ID with an OAuth client including the following permissions: Allow IAM policy configuration for environments (iam-policies-management) and View environments (account-env-read).

    This resource is excluded by default in the export utility, please explicitly specify the resource to retrieve existing configuration.

    This resource re-assigns all policies bound to a group, so every policy that should remain bound must be specified in the configuration; otherwise, it will be unbound. During this process, there is a brief window where the group has no policies assigned, which may temporarily cause permission issues for users in that group. Locking out the OAuth client through this resource is theoretically possible but very unlikely, as managing policies and groups requires account-level permissions. If account permissions are set on a group, policy boundaries can still be managed even when no policies are assigned.

    Dynatrace Documentation

    • Dynatrace IAM Group Permissions - https://docs.dynatrace.com/docs/manage/identity-access-management/permission-management/manage-user-permissions-policies

    • Settings API - https://www.dynatrace.com/support/help/how-to-use-dynatrace/user-management-and-sso/manage-groups-and-permissions/iam/iam-getting-started

    Create IamPolicyBindingsV2 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IamPolicyBindingsV2(name: string, args: IamPolicyBindingsV2Args, opts?: CustomResourceOptions);
    @overload
def IamPolicyBindingsV2(resource_name: str,
                        args: IamPolicyBindingsV2Args,
                        opts: Optional[ResourceOptions] = None)

@overload
def IamPolicyBindingsV2(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        group: Optional[str] = None,
                        account: Optional[str] = None,
                        environment: Optional[str] = None,
                        policies: Optional[Sequence[IamPolicyBindingsV2PolicyArgs]] = None)
    func NewIamPolicyBindingsV2(ctx *Context, name string, args IamPolicyBindingsV2Args, opts ...ResourceOption) (*IamPolicyBindingsV2, error)
    public IamPolicyBindingsV2(string name, IamPolicyBindingsV2Args args, CustomResourceOptions? opts = null)
    public IamPolicyBindingsV2(String name, IamPolicyBindingsV2Args args)
public IamPolicyBindingsV2(String name, IamPolicyBindingsV2Args args, CustomResourceOptions options)

    type: dynatrace:IamPolicyBindingsV2
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "dynatrace_iampolicybindingsv2" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args IamPolicyBindingsV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IamPolicyBindingsV2Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IamPolicyBindingsV2Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IamPolicyBindingsV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IamPolicyBindingsV2Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var iamPolicyBindingsV2Resource = new Dynatrace.IamPolicyBindingsV2("iamPolicyBindingsV2Resource", new()
{
    Group = "string",
    Account = "string",
    Environment = "string",
    Policies = new[]
    {
        new Dynatrace.Inputs.IamPolicyBindingsV2PolicyArgs
        {
            Id = "string",
            Boundaries = new[]
            {
                "string",
            },
            Metadata = 
            {
                { "string", "string" },
            },
            Parameters = 
            {
                { "string", "string" },
            },
        },
    },
});

    example, err := dynatrace.NewIamPolicyBindingsV2(ctx, "iamPolicyBindingsV2Resource", &dynatrace.IamPolicyBindingsV2Args{
	Group:       pulumi.String("string"),
	Account:     pulumi.String("string"),
	Environment: pulumi.String("string"),
	Policies: dynatrace.IamPolicyBindingsV2PolicyArray{
		&dynatrace.IamPolicyBindingsV2PolicyArgs{
			Id: pulumi.String("string"),
			Boundaries: pulumi.StringArray{
				pulumi.String("string"),
			},
			Metadata: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			Parameters: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
		},
	},
})

    resource "dynatrace_iampolicybindingsv2" "iamPolicyBindingsV2Resource" {
  group       = "string"
  account     = "string"
  environment = "string"
  policies {
    id         = "string"
    boundaries = ["string"]
    metadata = {
      "string" = "string"
    }
    parameters = {
      "string" = "string"
    }
  }
}

    var iamPolicyBindingsV2Resource = new IamPolicyBindingsV2("iamPolicyBindingsV2Resource", IamPolicyBindingsV2Args.builder()
    .group("string")
    .account("string")
    .environment("string")
    .policies(IamPolicyBindingsV2PolicyArgs.builder()
        .id("string")
        .boundaries("string")
        .metadata(Map.of("string", "string"))
        .parameters(Map.of("string", "string"))
        .build())
    .build());

    iam_policy_bindings_v2_resource = dynatrace.IamPolicyBindingsV2("iamPolicyBindingsV2Resource",
    group="string",
    account="string",
    environment="string",
    policies=[{
        "id": "string",
        "boundaries": ["string"],
        "metadata": {
            "string": "string",
        },
        "parameters": {
            "string": "string",
        },
    }])

    const iamPolicyBindingsV2Resource = new dynatrace.IamPolicyBindingsV2("iamPolicyBindingsV2Resource", {
    group: "string",
    account: "string",
    environment: "string",
    policies: [{
        id: "string",
        boundaries: ["string"],
        metadata: {
            string: "string",
        },
        parameters: {
            string: "string",
        },
    }],
});

    type: dynatrace:IamPolicyBindingsV2
properties:
    account: string
    environment: string
    group: string
    policies:
        - boundaries:
            - string
          id: string
          metadata:
            string: string
          parameters:
            string: string

    IamPolicyBindingsV2 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IamPolicyBindingsV2 resource accepts the following input properties:

    Group string
    The UUID of the group to which the policy applies
    Account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    Environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    Policies List<Pulumiverse.Dynatrace.Inputs.IamPolicyBindingsV2Policy>
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    Group string
    The UUID of the group to which the policy applies
    Account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    Environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    Policies []IamPolicyBindingsV2PolicyArgs
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    group string
    The UUID of the group to which the policy applies
    account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    policies list(object)
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    group String
    The UUID of the group to which the policy applies
    account String
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment String
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    policies List<IamPolicyBindingsV2Policy>
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    group string
    The UUID of the group to which the policy applies
    account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    policies IamPolicyBindingsV2Policy[]
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    group str
    The UUID of the group to which the policy applies
    account str
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment str
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    policies Sequence[IamPolicyBindingsV2PolicyArgs]
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    group String
    The UUID of the group to which the policy applies
    account String
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment String
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    policies List<Property Map>
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IamPolicyBindingsV2 resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing IamPolicyBindingsV2 Resource

    Get an existing IamPolicyBindingsV2 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IamPolicyBindingsV2State, opts?: CustomResourceOptions): IamPolicyBindingsV2
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account: Optional[str] = None,
        environment: Optional[str] = None,
        group: Optional[str] = None,
        policies: Optional[Sequence[IamPolicyBindingsV2PolicyArgs]] = None) -> IamPolicyBindingsV2
    func GetIamPolicyBindingsV2(ctx *Context, name string, id IDInput, state *IamPolicyBindingsV2State, opts ...ResourceOption) (*IamPolicyBindingsV2, error)
    public static IamPolicyBindingsV2 Get(string name, Input<string> id, IamPolicyBindingsV2State? state, CustomResourceOptions? opts = null)
    public static IamPolicyBindingsV2 get(String name, Output<String> id, IamPolicyBindingsV2State state, CustomResourceOptions options)
    resources:  _:    type: dynatrace:IamPolicyBindingsV2    get:      id: ${id}
    import {
  to = dynatrace_iampolicybindingsv2.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    Environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    Group string
    The UUID of the group to which the policy applies
    Policies List<Pulumiverse.Dynatrace.Inputs.IamPolicyBindingsV2Policy>
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    Account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    Environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    Group string
    The UUID of the group to which the policy applies
    Policies []IamPolicyBindingsV2PolicyArgs
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    group string
    The UUID of the group to which the policy applies
    policies list(object)
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    account String
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment String
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    group String
    The UUID of the group to which the policy applies
    policies List<IamPolicyBindingsV2Policy>
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    account string
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment string
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    group string
    The UUID of the group to which the policy applies
    policies IamPolicyBindingsV2Policy[]
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    account str
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment str
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    group str
    The UUID of the group to which the policy applies
    policies Sequence[IamPolicyBindingsV2PolicyArgs]
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.
    account String
    The UUID of the account (urn:dtaccount:<account-uuid>). The attribute policies must contain ONLY policies defined for that account. The prefix urn:dtaccount: MUST be omitted here.
    environment String
    The ID of the environment (https://\n\n.live.dynatrace.com). The attribute policies must contain ONLY policies defined for that environment.
    group String
    The UUID of the group to which the policy applies
    policies List<Property Map>
    A list of Policies (ID and parameters/metadata) referring to policies bound to that group. It's not possible to mix policies here that are defined for different scopes (different accounts or environments) than specified via attributes account or environment.

    Supporting Types

    IamPolicyBindingsV2Policy, IamPolicyBindingsV2PolicyArgs

    Id string
    Either the attribute id or the attribute uuid of a dynatrace.IamPolicy. Initially just the id attribute was supported (which is a concatenation of several configuration settings) - and is still supported for backwards compatibility
    Boundaries List<string>
    Metadata Dictionary<string, string>
    Parameters Dictionary<string, string>
    Id string
    Either the attribute id or the attribute uuid of a dynatrace.IamPolicy. Initially just the id attribute was supported (which is a concatenation of several configuration settings) - and is still supported for backwards compatibility
    Boundaries []string
    Metadata map[string]string
    Parameters map[string]string
    id string
    Either the attribute id or the attribute uuid of a dynatrace.IamPolicy. Initially just the id attribute was supported (which is a concatenation of several configuration settings) - and is still supported for backwards compatibility
    boundaries list(string)
    metadata map(string)
    parameters map(string)
    id String
    Either the attribute id or the attribute uuid of a dynatrace.IamPolicy. Initially just the id attribute was supported (which is a concatenation of several configuration settings) - and is still supported for backwards compatibility
    boundaries List<String>
    metadata Map<String,String>
    parameters Map<String,String>
    id string
    Either the attribute id or the attribute uuid of a dynatrace.IamPolicy. Initially just the id attribute was supported (which is a concatenation of several configuration settings) - and is still supported for backwards compatibility
    boundaries string[]
    metadata {[key: string]: string}
    parameters {[key: string]: string}
    id str
    Either the attribute id or the attribute uuid of a dynatrace.IamPolicy. Initially just the id attribute was supported (which is a concatenation of several configuration settings) - and is still supported for backwards compatibility
    boundaries Sequence[str]
    metadata Mapping[str, str]
    parameters Mapping[str, str]
    id String
    Either the attribute id or the attribute uuid of a dynatrace.IamPolicy. Initially just the id attribute was supported (which is a concatenation of several configuration settings) - and is still supported for backwards compatibility
    boundaries List<String>
    metadata Map<String>
    parameters Map<String>

    Package Details

    Repository
    dynatrace pulumiverse/pulumi-dynatrace
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the dynatrace Terraform Provider.
    dynatrace logo
    Viewing docs for Dynatrace v0.36.0
    published on Tuesday, Jun 9, 2026 by Pulumiverse
    Schema (JSON)
    pulumiverse/pulumi-dynatrace

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial