Forum Discussion

PHancke's avatar
PHancke
Copper Contributor
Mar 25, 2020

Limit Role access to Workbooks

Hi,

 

We have created a set of Workbooks that provides pre-emptive tasks / dashboards for the help desk. How can I give access to Helpdesk users to view these Workbooks without needing to give them Sentinel Reader permissions which will allow them to see Incidents that the SOC is working on and may be sensitive information? I have looked at creating a custom role but the Microsoft.SecurityInsights permissions does not have any Workbook related permissions?

 

Regards

 

Pieter

 

1 Reply

Sort By
  • PHancke's avatar
    PHancke
    Copper Contributor
    Mar 25, 2020

    PHancke 

    A bit of a hack, but I gave the user Log Analytics Reader perms on the RG and then copied the content of the Sentinel Workbook to Log Analytics Workbooks - this way the user can run the Workbook but have no direct permission in Sentinel

Resources