question

johnwilliams-4177 avatar image
0 Votes"
johnwilliams-4177 asked SwathiDhanwada-MSFT answered

Welcome to Azure - Log analytics workspace

When I attempt to create a log analytics workspace I am presented with Welcome to Azure Don't have a subscription window. I am assuming this is happening because the GA account I am using does not have permissions at the subscription level. I am working as a consultant for a client that is not associated with my MPN site. So how are we supposed to assist clients in situations such as these?

azure-monitor
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SwathiDhanwada-MSFT avatar image
0 Votes"
SwathiDhanwada-MSFT answered

@johnwilliams-4177 Permission to data in a Log Analytics workspace is defined by the access control mode, which is a setting on each workspace. Users can either be given explicit access to the workspace using a built-in or custom role, or you can allow access to data collected for Azure resources to users with access to those resources.

See Manage access to log data and workspaces in Azure Monitor for details on the different permission options and on configuring permissions.

Below are the minimum permissions you would require to create log analytics workspace.

  • Microsoft.Resources/subscriptions/resourceGroups/deployments/* - Create and manage resource group deployments

  • Microsoft.OperationalInsights/workspaces/* - To read and write log analyticsworkspaces

  • Microsoft.Resources/subscriptions/resourceGroups/* - To read and write resource groups


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MOXiMOX-2301 avatar image
0 Votes"
MOXiMOX-2301 answered johnwilliams-4177 commented

Hi
You need an account within the tenant and this account need the appropriate subscription permissions.

Alternatively if you are working in specific resource groups you could have permission only to those.

Mox

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Is there any documentation regarding the subscription permission requirements?

0 Votes 0 ·

What are the appropriate subscription permissions?

0 Votes 0 ·

Hi
You just need a permission at minimum read resources.

https://docs.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-tutorial

Please mark solution as answer if you find it helpful.


Mox

0 Votes 0 ·

The link doesn't speak to the permissions required to create a workspace. I am going to assign my account contributor permissions at the subscription level just to resolve the issue. I was just hoping that there would be some documentation that explained why I need to do this.

0 Votes 0 ·