Azure built-in roles · analytics
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 521c0ab · +6 −2 lines · also on GitHub
⋯ 562 unchanged lines
563563
564564
Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; adding solutions; and configuring Azure diagnostics on all Azure resources.
565565
566
+[!INCLUDE [role-read-permissions.md](../includes/role-read-permissions.md)]
567
+
566568
[Learn more](/azure/azure-monitor/logs/manage-access)
567569
568570
> [!div class="mx-tableFixed"]
569571
> | Actions | Description |
570572
> | --- | --- |
571
−> | */read | Read resources of all types, except secrets. |
573
+> | */read | Read control plane information for all Azure resources. |
572574
> | [Microsoft.ClassicCompute](../permissions/compute.md#microsoftclassiccompute)/virtualMachines/extensions/* | |
573575
> | [Microsoft.ClassicStorage](../permissions/storage.md#microsoftclassicstorage)/storageAccounts/listKeys/action | Lists the access keys for the storage accounts. |
574576
> | [Microsoft.Compute](../permissions/compute.md#microsoftcompute)/virtualMachines/extensions/* | |
⋯ 53 unchanged lines
628630
629631
Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.
630632
633
+[!INCLUDE [role-read-permissions.md](../includes/role-read-permissions.md)]
634
+
631635
[Learn more](/azure/azure-monitor/logs/manage-access)
632636
633637
> [!div class="mx-tableFixed"]
634638
> | Actions | Description |
635639
> | --- | --- |
636
−> | */read | Read resources of all types, except secrets. |
640
+> | */read | Read control plane information for all Azure resources. |
637641
> | [Microsoft.OperationalInsights](../permissions/monitor.md#microsoftoperationalinsights)/workspaces/analytics/query/action | Search using new engine. |
638642
> | [Microsoft.OperationalInsights](../permissions/monitor.md#microsoftoperationalinsights)/workspaces/search/action | Executes a search query |
639643
> | [Microsoft.Support](../permissions/general.md#microsoftsupport)/* | Create and update a support ticket |
⋯ 166 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 08:48 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.