Mar 22 2019
- last edited on
Apr 07 2022
we currently use azure aks and have a log workspace for logs from that cluster.
Is it possible to set up more detailed access permissions, for example, to ship logs from a (aks cluster applications) namespace to a specific log analytics workspace? The idea here is to configure user's access to the logs from their apps/namespace only, not to have access to all cluster logs.
Tried with azure cli, but it looks like that you can assign log workspace per cluster only.
Mar 22 2019 11:44 AM
When you setup monitoring there are many Log Analytics Tables that are produced.
You can use Table level RBAC to restrict access to those Tables? It only table level not fine grain to look at the data within.
Mar 24 2019 04:40 AM