Limit Role access to Workbooks

Brass Contributor



We have created a set of Workbooks that provides pre-emptive tasks / dashboards for the help desk. How can I give access to Helpdesk users to view these Workbooks without needing to give them Sentinel Reader permissions which will allow them to see Incidents that the SOC is working on and may be sensitive information? I have looked at creating a custom role but the Microsoft.SecurityInsights permissions does not have any Workbook related permissions?






1 Reply


A bit of a hack, but I gave the user Log Analytics Reader perms on the RG and then copied the content of the Sentinel Workbook to Log Analytics Workbooks - this way the user can run the Workbook but have no direct permission in Sentinel