Forum Discussion
Shared Dashboard Permissions - LA Queries Across Workspaces
-Akos- Hi, Thanks for the input. I tried Log Analytics Reader but it gives the following permissions: The Log Analytics Reader role includes the following Azure actions: For workspaces, it allows full unrestricted permissions to read the workspace settings and perform query on the data. I would like the Service Desk personnel to be able to see the data from the cross-workspace queries in the Dashboard but I don't want them to be able to perform queries.
Regarding the cross-workspace queries, I am doing what you show in your post. I create a function for the actual union so that I can reuse that function across multiple queries (CPU, Memory, Disk, etc.)
-Akos- Yes, but I only want them to be able to see the results of specific queries that I choose (CPU, Memory, Disk). I don't want them to be able to create their own queries and query for any information they choose to. These are Service Desk personnel and I don't want them to have this capability.
jwrossi Hmm, It doesn't seem like that would be possible, but you could create an RBAC role that would only limit access to certain tables, (see https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access), alternatively you could push the data to PowerBI, and create a report there, and then you can keep the service desk away from Log Analytics altogether.