MicrosoftA question can this be setup for tables like the SecurityEvent and SecurityAlert table.
I did the following and could not get it to work.
{
"Name": "Test Windows Security Logs Table Access",
"Id": null,
"IsCustom": true,
"Description": "Enable users to monitor WIndows servers Security Events and Alerts",
"Actions": [
"Microsoft.OperationalInsights/workspaces/read",
"Microsoft.OperationalInsights/workspaces/query/read",
"Microsoft.OperationalInsights/workspaces/query/SecurityAlert/read",
"Microsoft.OperationalInsights/workspaces/query/SecurityEvent/read"
],
"NotActions": [
],
"AssignableScopes": [
"/subscriptions/##################################"
]
}
