Manage Azure Data Explorer cluster permissions

Azure Data Explorer enables you to control access to resources in your cluster using a role-based access control model. Under this model, principals—users, groups, and apps—are mapped to security roles. Principals are granted access to cluster resources according to the roles they're assigned.

This article describes the available cluster level roles and how to assign principals to those roles using the Azure portal.

Note

• To configure cluster level permissions with C#, Python, and ARM templates, see Add cluster principals.
• To configure cluster level permissions with the Azure CLI, see az kusto.

Cluster level permissions

Role	Permissions
AllDatabasesAdmin	Full access in the scope of any database. May show and alter certain cluster-level policies. Includes all lower level All Databases permissions.
AllDatabasesViewer	Read all data and metadata of any database.
AllDatabasesMonitor	Execute .show commands in the context of any database and its child entities.

Manage cluster permissions in the Azure portal

1. Sign in to the Azure portal.

2. Go to your Azure Data Explorer cluster.

3. In the left-hand menu, under Security + networking, select Permissions.

   

4. Select Add, and select the role you want to assign.

   

5. In the New principals window, search for and select one or more principals.

   

6. Select Select to complete the assignment.

Related content

• Manage database permissions
• Role-based access control