Home

RBAC on LogAnalytics

%3CLINGO-SUB%20id%3D%22lingo-sub-1000347%22%20slang%3D%22en-US%22%3ERBAC%20on%20LogAnalytics%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1000347%22%20slang%3D%22en-US%22%3E%3CP%3Eis%20it%20possible%20to%20fine%20grain%20a%20control%20a%20user%20has%20over%20different%20data%20within%20log%20analytics%3C%2FP%3E%3CP%3Eexample%3A%20Company%20A%20-%20is%20ingesting%20data%20to%20Log%20analytics%201%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20Company%20B-%20is%20ingesting%20data%20to%20Log%20analytics%201%3C%2FP%3E%3CP%3Ei%20would%20like%20that%20each%20company%20will%20see%20its%20own%20data%20and%20no%20of%20each%20other.%3C%2FP%3E%3CP%3Ecompany%20A%20cant%20see%20B%20and%20vice%20versa.%20keep%20in%20mind%20that%20the%20data%20is%20all%20stored%20in%20the%20same%20table%20for%20both%20companys%3C%2FP%3E%3CP%3Eis%20RBAC%20over%20the%20data%20possible%20using%20Tags%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1000347%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ELog%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ERBAC%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
omrip
Occasional Contributor

is it possible to fine grain a control a user has over different data within log analytics

example: Company A - is ingesting data to Log analytics 1

                Company B- is ingesting data to Log analytics 1

i would like that each company will see its own data and not of each other.

company A cant see B and vice versa. keep in mind that the data is all stored on the same log Analytics and may be stores in the same table for both companys. 

is RBAC over the data possible using Tags?

3 Replies

@omrip It is not possible if they are storing information into the same table but if they use different tables then it is completely possible. 

 

This article has a lot of information regarding it:  https://techcommunity.microsoft.com/t5/Azure-Sentinel/Table-Level-RBAC-In-Azure-Sentinel/ba-p/965043

@Gary Bushey 

is it possible to tag data per Entity on ingest? 

do you have some mechanism of views (MSSQL like) in LA? that we could filter data by Tag on the where clause?

 

 

 

@Eran Alshech 

 

1) is it possible to tag data per Entity on ingest

  You have no control over the data as it comes in unless you are writing to a custom log

 

2) do you have some mechanism of views (MSSQL like) in LA? that we could filter data by Tag on the where clause?

  Not that I can see.  I fail to see any data that allows tags to be added

  

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies