Edit

How to use Azure Monitor workbooks for Azure Active Directory

  • Article
  • 2 minutes to read

When using Azure Workbooks, you can either start with an empty workbook, or use an existing template. Workbook templates enable you to quickly get started using workbooks without needing to build from scratch.

  • Public templates published to a gallery are a good starting point when you're just getting started with workbooks.
  • Private templates are helpful when you start building your own workbooks and want to save one as a template to serve as the foundation for multiple workbooks in your tenant.

Prerequisites

To use Azure Workbooks for Azure AD, you need:

  • An Azure Active Directory (Azure AD) tenant with a premium (P1 or P2) license. Learn how to get a premium license
  • The appropriate roles for the Log Analytics workspace and Azure AD
  • A Log Analytics workspace

  1. Create a Log Analytics workspace

    • Access to the Log Analytics workspace is determined by the workspace settings, access to the resources sending the data to the workspace, and the method used to access the workspace.
    • To ensure you have the right access, review the Manage access to Log Analytics workspaces article.

  2. Ensure that you have one of the following roles in Azure AD (if you're accessing the workspace through the Azure portal):

    • Security Administrator
    • Security Reader
    • Reports Reader
    • Global Administrator

  3. Ensure that you have the one of the following Azure roles for the subscription:

    • Global Reader
    • Reports Reader
    • Security Reader
    • Application Administrator
    • Cloud Application Administrator
    • Company Administrator
    • Security Administrator
    • For more information on Azure subscription roles, see Roles, permissions, and security in Azure Monitor.

How to access Azure Workbooks for Azure AD

  1. Sign in to the Azure portal.

  2. Navigate to Azure Active Directory > Monitoring > Workbooks.

    • Workbooks: All workbooks created in your tenant
    • Public Templates: Pre-built workbooks for common or high priority scenarios
    • My Templates: Templates you've created

  3. Select a report or template from the list. Workbooks may take a few moments to populate.

    • Search for a template by name.
    • Select the Browse across galleries to view templates that aren't specific to Azure AD.

    Find the Azure Monitor workbooks in Azure AD

Create a new workbook

Workbooks can be created from scratch or from a template. When creating a new workbook, you can add elements as you go or use the Advanced Editor option to paste in the JSON representation of a workbook, copied from the workbooks GitHub repository.

To create a new workbook from scratch:

  1. Navigate to Azure AD > Monitoring > Workbooks.

  2. Select + New.

  3. Select an element from the + Add menu.

    For more information on the available elements, see Creating an Azure Workbook.

    Screenshot of the Azure Workbooks +Add menu options.

To create a new workbook from a template:

  1. Navigate to Azure AD > Monitoring > Workbooks.

  2. Select a workbook template from the Gallery.

  3. Select Edit from the top of the page.

    • Each element of the workbook has its own Edit button.
    • For more information on editing workbook elements, see Azure Workbooks Templates

  4. Select the Edit button for any element. Make your changes and select Done editing. Screenshot of a workbook in Edit mode, with the Edit and Done Editing buttons highlighted.

  5. When you're done editing the workbook, select the Save As to save your workbook with a new name.

  6. In the Save As window:

    • Provide a Title, Subscription, Resource Group (you must have the ability to save a workbook for the selected Resource Group), and Location.
    • Optionally choose to save your workbook content to an Azure Storage Account.

  7. Select the Apply button.

Next steps