Forum Discussion
Possible to prevent creation of new Log Analytics workspaces?
Jeff Walzer Depending on how restrictive you want to be, you can put a lock on the resource group that will disallow any new resources to be created, but that only works in that resource group.
You could create a policy that prevents LA workspaces from being created and assign that to the subscription.
Jeff Walzer Depending on how restrictive you want to be, you can put a lock on the resource group that will disallow any new resources to be created, but that only works in that resource group.
You could create a policy that prevents LA workspaces from being created and assign that to the subscription.
Thx for the reply and information. I will pursue setting a policy at the subscription level. We're trying to centralize any and all logging to a single LA workspace.
On a separate note, is there a way to see what Azure roles (and the users within those roles) have access to creating a LA workspace? Trying to see who has right to create a LA workspace and having issues finding that info in Azure.
Thx