Is the reader role at the sub level could enable the traffic analytics in the same sub?

Question

Is the reader role at the sub level could enable the traffic analytics in the same sub?

Or we still need the contributor role to do so?

Answer 1

Hello @Shaojun Qin ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

As mentioned in the Traffic Analytics document, it requires the following prerequisites:

So, to answer your question,

Is the reader role at the sub level could enable the traffic analytics in the same sub?

No, the reader role at the subscription level is not enough to enable traffic analytics. You need a Contributor role or Network contributor & Monitoring contributor roles or the above custom roles.

• Reader role can only allow you to view all resources but does not allow you to make any changes. So, this role is not enough.
• Contributor role grants full access to manage all resources but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.
• Network Contributor role lets you manage networks, but not access to them. And hence you need Monitoring Contributor role along with it which allows you to read all monitoring data and edit monitoring settings.

Refer: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Kindly let us know if the above helps or you need further assistance on this issue.

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.