Forum Discussion

Pavan_Gelli1910's avatar
Pavan_Gelli1910
Brass Contributor
Jan 31, 2020
Solved

Log Analytics RBAC

Hi Team,   Below is my requirement related to configuring azure PAAS resources to Send logs to log analytics workspace. Tenant Name: XYZ   Subscription A - Log Analytics workspace(Name: Security...
  • hspinto's avatar
    hspinto
    Feb 08, 2020

    Pavan_Gelli1910, you'll have to create a custom role for that. As you can see by the Log Analytics Contributor role details, there are some permissions that relate to what you need to accomplish, such as Microsoft.Insights/diagnosticSettings/*.

     

    Try creating a custom role with these permissions and assign it to a test user. Beware of logging the test user out and in (in a new browser session) after assigning the role, just to be sure the permissions are loaded.

     

    Hope that helps! If it doesn't work, then you'll probably need to add other permissions to the custom role. See here a complete list of available permissions for Log Analytics.

Resources