How to give Sentinel workbook access to a perticular user?

Question

Dear Team,

We have created a workbook in sentinel workspace. But that workbook is accessible by all the owners of the workspace. Can we set the access for one single user?

Thanking you.

Answer 1

Hello,
An Workbook is an Azure Resource, meaning that you can control who have access to that specific resource by configuring the Access Control (IAM) settings on it.
You should be able to find the Workbook Resource (usually in the same Resource Group where you have the Sentinel Workspace) and then from the Access Control pane of that Workbook resource, you can specify what users have permissions.
Make sure that the same users with permissions also have access to the Log Analytics Workspace (Sentinel Reader Role) so that the visualization from the workbook will load.

BR,
George

Answer 2

Here is a good article on the topic: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/sharing-azure-sentinel-workbook-data-with-someone-outside-the/ba-p/1623146