Thanks! To elaborate on this, people who have assigned the Monitoring Reader role can view all monitoring data in a subscription but can't modify any resource or edit any settings related to monitoring resources. This role is appropriate for users in an organization, such as support or operations engineers, who need to be able to:
- View monitoring dashboards in the Azure portal.
- View alert rules defined in Azure alerts.
- View alert activity and settings.
Also Note that this Monitoring Role does not give read access to log data that has been streamed to an event hub or stored in a storage account.
For information on configuring access to these resources, see the Security considerations for monitoring data
Let us know.