You can set AppDynamics account permissions for custom roles from the Account tab in the Controller Administration UI. Most installations have one account per Controller. Usually, only very large installations or installations that have very distinct sets of users may require multiple accounts. Multiple accounts are part of the multi-tenant mode of installing the Controller. See Controller Deployment for details. In multi-tenant mode, the Controller UI context is divided into separate accounts. Each account has its own set of users, agents reporting to it, and application monitoring configuration.
The account predefined role is the Account Owner. This role is also known as the account administrator and has all account-level permissions except Execute Workflows. This role also has the following permissions:
- Can Create Applications and Dashboards
- All Database Visibility (Databases) related permissions
Most Account-level permissions can be considered administrative permissions and apply account-wide across business applications, products, and multiple application instances for the same account. The following table lists the permissions that can be set at the Account level.
|Permission||Activities enabled||More Information|
|Administer users, groups, roles, authentication, etc. View AppDynamics Agents. Use Agent Download Wizard|
Add or edit users, groups, roles, and the authentication provider. Download agents using the download wizard.
|Manage Users and Groups|
|View and Configure Licenses|
View and create rules to specify the number of Application Performance Monitoring licenses to allocate to specified applications and machines.
|Configure Email / SMS||Edit email and SMS settings used by AppDynamics to send alerts|
|Configure Email Templates||Configure email templates for use in notification alerts.||Email Templates|
|Configure HTTP Request Templates|
Configure the HTTP request templates used by HTTP request actions, which are triggered by AppDynamics policies.
|HTTP Request Actions and Templates|
|Create War Rooms||Create (start) a war room. War rooms are collaborative custom dashboards created in real time.||Virtual War Rooms|
|View Business Flow|
View all applications in a multi-business-application flow map, including those for which they are not granted explicit application permissions.
Does not grant permission to drill down to applications that the user does not have permission to view. To see the downstream metrics and snapshots for the correlated application, the user must be a member of a role with view permissions to that business application.
|Cross Application Flow|
|View Scheduled Reports||View scheduled reports from the Dashboards and Reports section of the UI.|
|Configure Scheduled Reports||Create, delete, send, or update scheduled reports.|
|View Universal Agent||Can use Universal Agent REST APIs to view information.||Universal Agent REST APIs|
|Configure Universal Agent||Can use Universal Agent REST APIs that add or change Universal Agent configuration.||Universal Agent REST APIs|
|View Synthetic Credential Vault||Manage user permissions for the Synthetic Credential Vault.||Synthetic Credential Vault|
|Install Agent||Can use the Agent Installer to deploy the Zero Agent, Java Agent, and Machine Agent.||Agent Installer|