Forum Discussion
ehloworldio
Mar 26, 2020Brass Contributor
Sentinel RBAC not working for Workbooks
I've recently started testing the 3 built-in Azure Sentinel RBAC roles based on https://docs.microsoft.com/en-us/azure/sentinel/roles Azure Sentinel reader Azure Sentinel responder Azure Sentinel...
- Mar 26, 2020
ehloworldio Try also adding the Log Analytics Reader (or Contributor) role and try again.
MS_Clouder
Apr 08, 2020MCT
Hi ehloworldio,
You can create a custom role to allow users to read Workbooks to avoid the read rights on the whole of Log Analytics.
For example, you can add the read rights on Azure Sentinel and on Workbooks.
When you create the custom role, start to use the Azure Sentinel Reader and add these permissions:
Microsoft.Insights/Components/Read
Microsoft.Insights/Components/Events/Read
Microsoft.Insights/Components/Query/Read
Your user will have access with read rights on the Azure Sentinel and on saved Workbooks.