SOLVED

Access to query in monitor

Copper Contributor

Hi folks,

 

I've written a basic query in Azure Monitor that uses an Application Insights instance as its datasource. I'm trying to give another user access to that report.

 

I've tried giving them the Monitoring Reader role in App Insights, but they still can't access it, what's the role I need to give them so that they can run the query?

 

Thanks!

Dave.

2 Replies
best response confirmed by davephall (Copper Contributor)
Solution
If the data is coming from a log analytics workspace then they will need Reader on that workspace or Log Analytics Reader. Unfortunately this gives them read access to every table in that LAW. You CAN create a custom role which only gives read access to the specific table, such as InsightMetrics
This blog might be useful to explain how to do that https://msendpointmgr.com/2021/10/23/managing-permissions-for-log-analytics-and-workbooks/
That's exactly what I'm looking for, thanks!
1 best response

Accepted Solutions
best response confirmed by davephall (Copper Contributor)
Solution
If the data is coming from a log analytics workspace then they will need Reader on that workspace or Log Analytics Reader. Unfortunately this gives them read access to every table in that LAW. You CAN create a custom role which only gives read access to the specific table, such as InsightMetrics
This blog might be useful to explain how to do that https://msendpointmgr.com/2021/10/23/managing-permissions-for-log-analytics-and-workbooks/

View solution in original post