Hi YanivSh, thank you for your article.
I'd like to ask you if you faced any issues when configuring RBAC to tables.
I have faced several issues when I have applied permissions to a custom role, where the users inside of this role are only allowed query-specific tables.
The defined users inside of this custom role don't have access to the sentinel subscription, only to the log-analytics workspace, until here everything is working as expected.
When they try to access the data inside of log-analytics workspace, they started to receiving issues with the permissions even with the correct permissions, now this is fixed but I'm having another issue and is related to access to the Azure Diagnostics data.
The users have permissions to access 3 tables one of these tables is the Azure Diagnostics when they try to query it no data is displayed but for the remaining tables they are able to see the data.
Any thoughts on why this is happening?
Thank you.
D.