does not have authorization to perform action 'microsoft.insights/logs/read' over scope
While creating a "Custom log search" alert in Azure Monitor, I'm receiving the following error when the query editor loads:
Failed to retrieve schema. Please try to refresh the page. The client 'blah@msft.com' with object id 'f771d999-7f9e-46dd-9f29-ce11b77aa64e' does not have authorization to perform action 'microsoft.insights/logs/read' over scope '/subscriptions/f8ec86a6-6797-4f4e-bf4f-45881d57a16f/providers/microsoft.insights/logs/metadata' or the scope is invalid. If access was recently granted, please refresh your credentials.
What permission(s) need to change? And what resource does 'microsoft.insights' correspond to? 🤔
What permission(s) need to change?
In Access Control (IAM) of the subscription, add the requesting user to the Log Analytics Reader role
Role name: Log Analytics Reader
Role desc: Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.
what resource does 'microsoft.insights' correspond to?
Apparently Microsoft.Insights is Azure Monitor (source)
- Cannot add data to a ComplexField using Python SDK for Azure AI Search
- letsencrypt cert request failing for AKS ingress
- Playwright Test execution on Azure Windows machine fails in pipeline with error as No test found, It works perfectly with same command
- How to Combining PowerShell Output from multiple server to Single csv
- How can I find all Azure app registrations with API permissions to a specific app registration?
- Azure Deployment Groups vs Agent Pools
- I cannot extract .sql CREATE TABLEs for each table in my Azure SQL Database in my Azure Repo
- Can not read blobs through BlobContainerClient for blobs with empty folder prefixes
- Are task logs deleted when the node is deleted due to autoscaling in Azure Batch service?
- Azure Function Blob Storage Monitor
- I want to fetch Azure SQL table data from ADF to use as input in copy activity
- How to access code of my Azure website?
- Run JMeter script in AzureDevOps - Bearer Access Token generation
- Azure Function - HTTP trigger request length exceeded
- How and where to define an environment variable on Azure
- Stream Analytics doesn't output the data to SQL but does to a blob storage
- While Hierarchical namespace enabled cannot upload blob with metadata hdi_isfolder
- Cannot log in to Visual Studio Account in VS 2022
- SchemaColumnConvertNotSupportedException: column: [Col_Name], physicalType: INT64, logicalType: string
- create Azure Keyvault secret without exposing values
- Can you create 'User Flows' in Azure with a pay-as-you-go account
- Deploy ARM template at management group scope with Azure DevOps Pipeline
- How to make an azure function that deploys my bicep script from Azure Storage Account
- Basic SQL commands in Terraform
- Can we Deploy Web Application in Azure OpenAI of Production Level
- Get-MgGroupMember by display name instead of userID
- Azure DevOps REST API parent relation link to existing work item error
- What should be put to 'repoOwners' in Managed Identity Federated Credentials policy?
- How to get list of users from CSV file whose LastSignInDate column has a date that is before 90 days from current date or is empty?
- Langchain cannot connect with Azure SQL Database