Forum Discussion

davephall's avatar
davephall
Copper Contributor
Jul 20, 2022
Solved

Access to query in monitor

Hi folks,

 

I've written a basic query in Azure Monitor that uses an Application Insights instance as its datasource. I'm trying to give another user access to that report.

 

I've tried giving them the Monitoring Reader role in App Insights, but they still can't access it, what's the role I need to give them so that they can run the query?

 

Thanks!

Dave.

  • If the data is coming from a log analytics workspace then they will need Reader on that workspace or Log Analytics Reader. Unfortunately this gives them read access to every table in that LAW. You CAN create a custom role which only gives read access to the specific table, such as InsightMetrics
    This blog might be useful to explain how to do that https://msendpointmgr.com/2021/10/23/managing-permissions-for-log-analytics-and-workbooks/

2 Replies

  • Jeremy Hagan's avatar
    Jeremy Hagan
    Copper Contributor
    If the data is coming from a log analytics workspace then they will need Reader on that workspace or Log Analytics Reader. Unfortunately this gives them read access to every table in that LAW. You CAN create a custom role which only gives read access to the specific table, such as InsightMetrics
    This blog might be useful to explain how to do that https://msendpointmgr.com/2021/10/23/managing-permissions-for-log-analytics-and-workbooks/
    • davephall's avatar
      davephall
      Copper Contributor
      That's exactly what I'm looking for, thanks!

Resources