question

JamesThompson-7889 avatar image
0 Votes"
JamesThompson-7889 asked vipulsparsh-MSFT answered

Azure Sentinel Analytics - Permissions required to Create Rule

114522-image.png




Is anyone aware as to what permissions are needed to create new Analytics Rules within Azure Sentinel?

Azure Sentinel contributor and Log Analytics Contributor don't seem to be doing the trick!

Thanks

microsoft-sentinel
image.png (6.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered

@JamesThompson-7889 Thanks for reaching out.

You should be able to create the Azure sentinel analytic rule even just with Azure Sentinel Contributor role. I verified this in my lab and it works :
114560-image.png

114632-image.png


Make sure that you signed out and signed in again with the account to which you assigned the permission, this guarantees the permission sync in quick way, otherwise there might be few seconds delays. Let me know if this helps.



Please "Accept the answer" if the information helped you. This will help us and others in the community as well.






image.png (36.3 KiB)
image.png (35.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.