Forum Discussion
Least Privilege Permissions on Log Analytics Workspace for Azure Sentinel
Hi Documentation on the RBAC design for Azure Sentinel is a little vague. I am just enabling Azure Sentinel and wanted to understand the least privilege permissions (as we share the Log Analytics...
Hi
Our recommendation would be to give reader access to the resource group that the workspace resides in for the least privileges. Obviously, readers wont be able to create analytics and dashboards. If the team needs to be able to do that then give contributor to the RG that the workspace resides in.