People assigned the Monitoring Contributor role can view all monitoring data in a subscription. For information on how to configure access to these resources, see the Security considerations for monitoring data section later in this article. This role doesn't give read access to log data that has been streamed to an event hub or stored in a storage account. Retrieve and execute log queries in a Log Analytics workspace.Retrieve the table schemas in a Log Analytics workspace.Search Log Analytics workspace data, including usage data for the workspace.View the log profile for a subscription.View the diagnostic settings for a resource.Query the Activity log by using the portal, Azure Monitor REST API, PowerShell cmdlets, or cross-platform CLI.Query Azure Monitor Metrics by using the Azure Monitor REST API, PowerShell cmdlets, or cross-platform CLI.View alert rules defined in Azure alerts.View monitoring dashboards in the Azure portal.This role is appropriate for users in an organization, such as support or operations engineers, who need to: People assigned the Monitoring Reader role can view all monitoring data in a subscription but can't modify any resource or edit any settings related to monitoring resources. Azure Monitor Logs also provides built-in roles for managing access to data in a Log Analytics workspace, as described in Manage access to Log Analytics workspaces. Azure Monitor provides two out-of-the-box roles: Monitoring Reader and Monitoring Contributor. Built-in monitoring rolesīuilt-in roles in Azure Monitor help limit access to resources in a subscription while still enabling staff who monitor infrastructure to obtain and configure the data they need. The article then discusses security considerations for your Azure Monitor-related resources and how you can limit access to the data in those resources. This article shows how to quickly apply a built-in monitoring role to a user in Azure or build your own custom role for a user who needs limited monitoring permissions.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |