When I attempt to create a log analytics workspace I am presented with Welcome to Azure Don't have a subscription window. I am assuming this is happening because the GA account I am using does not have permissions at the subscription level. I am working as a consultant for a client that is not associated with my MPN site. So how are we supposed to assist clients in situations such as these?
@johnwilliams-4177 Permission to data in a Log Analytics workspace is defined by the access control mode, which is a setting on each workspace. Users can either be given explicit access to the workspace using a built-in or custom role, or you can allow access to data collected for Azure resources to users with access to those resources.
See Manage access to log data and workspaces in Azure Monitor for details on the different permission options and on configuring permissions.
Below are the minimum permissions you would require to create log analytics workspace.
Microsoft.Resources/subscriptions/resourceGroups/deployments/* - Create and manage resource group deployments
Microsoft.OperationalInsights/workspaces/* - To read and write log analyticsworkspaces
Microsoft.Resources/subscriptions/resourceGroups/* - To read and write resource groups
Hi
You need an account within the tenant and this account need the appropriate subscription permissions.
Alternatively if you are working in specific resource groups you could have permission only to those.
Mox
Is there any documentation regarding the subscription permission requirements?
Hi
You just need a permission at minimum read resources.
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-tutorial
Please mark solution as answer if you find it helpful.
Mox
The link doesn't speak to the permissions required to create a workspace. I am going to assign my account contributor permissions at the subscription level just to resolve the issue. I was just hoping that there would be some documentation that explained why I need to do this.
38 people are following this question.
