Azure Monitor: Request API Permissions

Liam Eisenhaur 21 Reputation points
2021-10-15T16:18:25.923+00:00

I am writing an application to collect azure monitor logs. Part of that process is enabling the proper permissions for the application I register in Azure. I have done this before with Office 365 by registering an app with the Office 365 Management APIs permissions. Which permissions need to be used to allow access to get the logs for Azure Monitor? This documentation (https://learn.microsoft.com/en-us/rest/api/azure/#register-your-client-application-with-azure-ad), under the header Client Registration, says the api is called Azure Resource Manager API, but on the permissions list, there is no permission with that name that I could find. Any help would be appreciated. Thanks!
140867-image.png

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,812 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,646 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AnuragSingh-MSFT 20,106 Reputation points
    2021-10-19T09:30:04.127+00:00

    Hi @Liam Eisenhaur ,

    Welcome to Microsoft Q&A!

    Once the app has been registered in Azure, it gets a Service principal created for it which can be used in Azure role-based access control. Azure monitor has Built-in roles which can be assigned to the registered application's service principal for desired access (Reader, Contributor or Custom). The role-based access control is set at resource level. Please refer to this link for ApplicationInsights related details, and this link for log analytics.

    ---
    Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

    1 person found this answer helpful.