Ho to fix - You do not have ability to create workbook in this group (saving workbook)

Question

Hi,

I have a microsoft sentinel contributor permission, but when trying to save a workbook, getting this message "You do not have ability to create workbook in this group". Any idea please?

Thanks
Mv

Answer 1

Hi @Mv

As per the following document Roles and permissions in Microsoft Sentinel

If you have already assigned the Microsoft Sentinel Contributor role and the Workbook Contributor Azure Monitor role, but still can't create a workbook, you might want to check the permissions at the resource group level

Note from doc:

For best results, assign these roles to the resource group that contains the Microsoft Sentinel workspace. This way, the roles apply to all the resources that support Microsoft Sentinel, as those resources should also be placed in the same resource group.

Creating and deleting workbooks

• To create and delete a Microsoft Sentinel workbook, the user needs either the Microsoft Sentinel Contributor role or a lesser Microsoft Sentinel role**, together with the Workbook Contributor Azure Monitor role.** This role isn't necessary for using workbooks, only for creating and deleting.

Hope this helps!

If this response has answered your query, please 'Accept as Answer' and Upvote using "Thumbs-up" so that the relevancy of this post will improve when anyone in the community search for a similar query.

If you have any further questions, tag me in the comments.