Enablement app — tenant readiness check

Verifies your tenant + account OAuth client can do everything the Enablement app needs, before you register it: mint per-learner tokens, install OneAgent/ActiveGate, write settings, store training content. Runs live probes — a granted scope is not proof.

Your client secret is used once, in memory, for this check only — never logged, never stored, never shown to anyone. Every test credential the check creates is deleted before the page responds. Prefer not to paste a secret into a web page? Run the same script yourself — identical checks, identical verdict.

The 15 scopes your OAuth client needs (create it with all of them)

In myaccount.dynatrace.com → Identity & access management → OAuth clients → New. Scopes cannot be added to an existing client afterwards — if one is missing, create a new client.

Environment (13):

app-engine:apps:install
app-engine:apps:run
app-engine:apps:delete
settings:objects:read
settings:objects:write
app-settings:objects:read
environment-api:api-tokens:read
environment-api:api-tokens:write
environment-api:activegate-tokens:write
document:documents:read
document:documents:write
document:documents:delete
document:documents:admin

Account (2):

platform-token:tokens:write
platform-token:tokens:manage