RBAC on LogAnalytics

%3CLINGO-SUB%20id%3D%22lingo-sub-1000347%22%20slang%3D%22en-US%22%3ERBAC%20on%20LogAnalytics%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1000347%22%20slang%3D%22en-US%22%3E%3CP%3Eis%20it%20possible%20to%20fine%20grain%20a%20control%20a%20user%20has%20over%20different%20data%20within%20log%20analytics%3C%2FP%3E%3CP%3Eexample%3A%20Company%20A%20-%20is%20ingesting%20data%20to%20Log%20analytics%201%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20Company%20B-%20is%20ingesting%20data%20to%20Log%20analytics%201%3C%2FP%3E%3CP%3Ei%20would%20like%20that%20each%20company%20will%20see%20its%20own%20data%20and%20no%20of%20each%20other.%3C%2FP%3E%3CP%3Ecompany%20A%20cant%20see%20B%20and%20vice%20versa.%20keep%20in%20mind%20that%20the%20data%20is%20all%20stored%20in%20the%20same%20table%20for%20both%20companys%3C%2FP%3E%3CP%3Eis%20RBAC%20over%20the%20data%20possible%20using%20Tags%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1000347%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ELog%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ERBAC%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Contributor

is it possible to fine grain a control a user has over different data within log analytics

example: Company A - is ingesting data to Log analytics 1

                Company B- is ingesting data to Log analytics 1

i would like that each company will see its own data and not of each other.

company A cant see B and vice versa. keep in mind that the data is all stored on the same log Analytics and may be stores in the same table for both companys. 

is RBAC over the data possible using Tags?

3 Replies
Highlighted

@omrip It is not possible if they are storing information into the same table but if they use different tables then it is completely possible. 

 

This article has a lot of information regarding it:  https://techcommunity.microsoft.com/t5/Azure-Sentinel/Table-Level-RBAC-In-Azure-Sentinel/ba-p/965043

Highlighted

@Gary Bushey 

is it possible to tag data per Entity on ingest? 

do you have some mechanism of views (MSSQL like) in LA? that we could filter data by Tag on the where clause?

 

 

 

Highlighted

@Eran Alshech 

 

1) is it possible to tag data per Entity on ingest

  You have no control over the data as it comes in unless you are writing to a custom log

 

2) do you have some mechanism of views (MSSQL like) in LA? that we could filter data by Tag on the where clause?

  Not that I can see.  I fail to see any data that allows tags to be added