Forum Discussion
Solved
Sentinel RBAC not working for Workbooks
I've recently started testing the 3 built-in Azure Sentinel RBAC roles based on https://docs.microsoft.com/en-us/azure/sentinel/roles Azure Sentinel reader Azure Sentinel responder Azure Sentinel...
ehloworldio Try also adding the Log Analytics Reader (or Contributor) role and try again.
MS_Clouder - I am using Azure Lighthouse thus published a shared dashboard into my customer tenants workspace. I am lost on how to implement RBAC to access/limit users from accessing this dashboard which is at a customer tenant.
Appreciate any advice.
Hi Prash,
What dashboard are you talking about? Sentinel dashboard?
Perhaps, you’ll get a better answer to your question on another topic specialized on Azure Lighthouse if it’s this one.
In my previous post, I talked about the reading rights on Azure Sentinel Workbook.
Let me know if I can help you.
Joris
What dashboard are you talking about? Sentinel dashboard?
Perhaps, you’ll get a better answer to your question on another topic specialized on Azure Lighthouse if it’s this one.
In my previous post, I talked about the reading rights on Azure Sentinel Workbook.
Let me know if I can help you.
Joris
MS_Clouder - Thanks for your reply. I am talking about the Azure Dashboards that utilize graphs pinned from workbook and some custom graph that query sentinel workspace logs. As an MSSP when you build these dashboards and push to customer tenants workspace using Azure lighthouse we dont get the control to assign RBAC permissions for the dashboard resource that resides in customer tenant.