Azure Monitor Workbook and Azure AD objects ?

LukeCloudWalker-6128 41 Reputation points
2022-10-18T13:54:07.697+00:00

Hello,

I was looking for a way to query Azure AD objects (first use case are service principals) from an Azure Monitor Workbook (essentially the goal would be to have a dashboard to check for near expiring secrets and cross the information with Azure Resource to check unused service principals for example)

The problem i'm having is that it seems impossible to use Azure Resource Manager or Azure Resource Graph for this. I tried using a custom endpoint with an API Call but thats seems overkill and i dont want to store any token on the dashboard.

Is this something doable today ? Soon ? Forget it ?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,645 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
0 comments No comments
{count} vote

2 answers

Sort by: Most helpful
  1. Maxim Sergeev 6,586 Reputation points Microsoft Employee
    2022-10-18T16:04:43.35+00:00

    Hi there,

    Azure Workbooks can't use SPN and other AD objects. They work on top of user's session.
    Custom Endpoints doesn't support auth calls per your request.


  2. Mike Crowley 216 Reputation points
    2024-06-29T17:50:43.19+00:00

    This can be done by having the workbook query a log analytics workspace, which is populated by Power Automate, though it may fit your definition of "overkill".

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.