Azure Monitor Agent on Workstation

George Zerphey 131

I'm attempting to install the AMA on a workstation and have found this page: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client#create-and-associate-a-monitored-object

I am able to follow the page and install the AMA on the workstation and verify the install. However when i try to create the monitored object necessary for the AMA on workstation to report into as a resource for the data collection agent I'm not able to. I have tried with the owner of the tenant so permissions should not be an issue, but that is the error I'm getting. That the user does not have permissions to add the monitored object.

I have tried using powershell as well as the API. I thought maybe its an explicit role so I tried to add it to my user and an app registration managed identity, but when i look for the role "Managed Object Contributor" this does not seem to exist.

Any help would be appreciated.

Maxim Sergeev 6,566 Reputation points Microsoft Employee

2022-09-15T18:36:39.86+00:00

Hi @George Zerphey ,

the role "Managed Object Contributor" this does not seem to exist.

This is a known issue in the docs. If you can assign yourself as "Global Administrator" in your tenant - I believe this will solve the issue

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-administrator
George Zerphey 131 Reputation points

2022-09-15T19:46:42.667+00:00

I am a global admin / owner at the organization level in Azure AD. Is there another place I need to assign this role?
Maxim Sergeev 6,566 Reputation points Microsoft Employee

2022-09-15T19:53:06.663+00:00

Recently checked with the product team who owns the feature.
The doc is a little bit outdated, but the proposed steps here https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client#1-assign-monitored-object-contributor-role-to-the-operator should work
George Zerphey 131 Reputation points

2022-09-15T19:55:36.253+00:00

This is the same document I attached before and said did not work.
Maxim Sergeev 6,566 Reputation points Microsoft Employee

2022-09-15T20:16:24.217+00:00

I saw you first message. I'm just informing you it should work. I recently followed the same guidance.
My laptop with Windows 11 is reporting to LA now successfully

Additionally, one of our community members has developed the following PS-script. Maybe it will be useful for you.
Attached as txt

241565-ama-client-onboard.txt
George Zerphey 131 Reputation points

2022-09-15T20:17:36.32+00:00

Ok cool I'll give it a shot.
SwathiDhanwada-MSFT 17,401 Reputation points

2022-09-19T09:59:59.917+00:00

@George Zerphey Did you get chance to check the solution provided by the community member? Kindly revert if you have further questions.