Mods
Azure

IAM Role: Azure/Log Analytics/metadata

PermissionGrant
microsoft.operationalinsights/workspaces/readmetadata
microsoft.operationalinsights/workspaces/storageinsightconfigs/readmetadata
microsoft.operationalinsights/workspaces/sharedkeys/readmetadata
microsoft.operationalinsights/workspaces/listkeys/readmetadata
microsoft.operationalinsights/workspaces/managementgroups/readmetadata
microsoft.operationalinsights/workspaces/usages/readmetadata
microsoft.operationalinsights/workspaces/schema/readmetadata
microsoft.operationalinsights/workspaces/datasources/readmetadata
microsoft.operationalinsights/workspaces/savedsearches/readmetadata
microsoft.operationalinsights/workspaces/notificationsettings/readmetadata
microsoft.operationalinsights/workspaces/configurationscopes/readmetadata
microsoft.operationalinsights/workspaces/linkedservices/readmetadata
microsoft.operationalinsights/workspaces/intelligencepacks/readmetadata
microsoft.operationalinsights/workspaces/analytics/query/schema/readmetadata
microsoft.operationalinsights/workspaces/api/query/schema/readmetadata
microsoft.operationalinsights/linktargets/readmetadata
microsoft.operationalinsights/workspaces/metricdefinitions/readmetadata
microsoft.operationalinsights/workspaces/search/readmetadata
microsoft.operationalinsights/workspaces/savedsearches/results/readmetadata
microsoft.operationalinsights/operations/readmetadata
microsoft.operationalinsights/workspaces/upgradetranslationfailures/readmetadata
microsoft.operationalinsights/workspaces/rules/readmetadata
microsoft.operationalinsights/workspaces/savedsearches/schedules/readmetadata
microsoft.operationalinsights/workspaces/savedsearches/schedules/actions/readmetadata
microsoft.operationalinsights/workspaces/query/adassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/adreplicationresult/readmetadata
microsoft.operationalinsights/workspaces/query/adsecurityassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/alert/readmetadata
microsoft.operationalinsights/workspaces/query/alerthistory/readmetadata
microsoft.operationalinsights/workspaces/query/appcentererror/readmetadata
microsoft.operationalinsights/workspaces/query/applicationinsights/readmetadata
microsoft.operationalinsights/workspaces/query/auditlogs/readmetadata
microsoft.operationalinsights/workspaces/query/azureactivity/readmetadata
microsoft.operationalinsights/workspaces/query/azuremetrics/readmetadata
microsoft.operationalinsights/workspaces/query/boundport/readmetadata
microsoft.operationalinsights/workspaces/query/commonsecuritylog/readmetadata
microsoft.operationalinsights/workspaces/query/computergroup/readmetadata
microsoft.operationalinsights/workspaces/query/configurationchange/readmetadata
microsoft.operationalinsights/workspaces/query/configurationdata/readmetadata
microsoft.operationalinsights/workspaces/query/containerimageinventory/readmetadata
microsoft.operationalinsights/workspaces/query/containerinventory/readmetadata
microsoft.operationalinsights/workspaces/query/containerlog/readmetadata
microsoft.operationalinsights/workspaces/query/containerservicelog/readmetadata
microsoft.operationalinsights/workspaces/query/deviceappcrash/readmetadata
microsoft.operationalinsights/workspaces/query/deviceapplaunch/readmetadata
microsoft.operationalinsights/workspaces/query/devicecalendar/readmetadata
microsoft.operationalinsights/workspaces/query/devicecleanup/readmetadata
microsoft.operationalinsights/workspaces/query/deviceconnectsession/readmetadata
microsoft.operationalinsights/workspaces/query/deviceetw/readmetadata
microsoft.operationalinsights/workspaces/query/devicehardwarehealth/readmetadata
microsoft.operationalinsights/workspaces/query/devicehealth/readmetadata
microsoft.operationalinsights/workspaces/query/deviceheartbeat/readmetadata
microsoft.operationalinsights/workspaces/query/deviceskypeheartbeat/readmetadata
microsoft.operationalinsights/workspaces/query/deviceskypesignin/readmetadata
microsoft.operationalinsights/workspaces/query/devicesleepstate/readmetadata
microsoft.operationalinsights/workspaces/query/dhappfailure/readmetadata
microsoft.operationalinsights/workspaces/query/dhappreliability/readmetadata
microsoft.operationalinsights/workspaces/query/dhdriverreliability/readmetadata
microsoft.operationalinsights/workspaces/query/dhlogonfailures/readmetadata
microsoft.operationalinsights/workspaces/query/dhlogonmetrics/readmetadata
microsoft.operationalinsights/workspaces/query/dhoscrashdata/readmetadata
microsoft.operationalinsights/workspaces/query/dhosreliability/readmetadata
microsoft.operationalinsights/workspaces/query/dhwipapplearning/readmetadata
microsoft.operationalinsights/workspaces/query/dnsevents/readmetadata
microsoft.operationalinsights/workspaces/query/dnsinventory/readmetadata
microsoft.operationalinsights/workspaces/query/etwevent/readmetadata
microsoft.operationalinsights/workspaces/query/event/readmetadata
microsoft.operationalinsights/workspaces/query/exchangeassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/exchangeonlineassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/heartbeat/readmetadata
microsoft.operationalinsights/workspaces/query/iisassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/inboundconnection/readmetadata
microsoft.operationalinsights/workspaces/query/kubeevents/readmetadata
microsoft.operationalinsights/workspaces/query/kubenodeinventory/readmetadata
microsoft.operationalinsights/workspaces/query/kubepodinventory/readmetadata
microsoft.operationalinsights/workspaces/query/kubeservices/readmetadata
microsoft.operationalinsights/workspaces/query/linuxauditlog/readmetadata
microsoft.operationalinsights/workspaces/query/maapplication/readmetadata
microsoft.operationalinsights/workspaces/query/maapplicationhealth/readmetadata
microsoft.operationalinsights/workspaces/query/maapplicationhealthalternativeversions/readmetadata
microsoft.operationalinsights/workspaces/query/maapplicationhealthissues/readmetadata
microsoft.operationalinsights/workspaces/query/maapplicationinstance/readmetadata
microsoft.operationalinsights/workspaces/query/maapplicationinstancereadiness/readmetadata
microsoft.operationalinsights/workspaces/query/maapplicationreadiness/readmetadata
microsoft.operationalinsights/workspaces/query/madeploymentplan/readmetadata
microsoft.operationalinsights/workspaces/query/madevice/readmetadata
microsoft.operationalinsights/workspaces/query/madevicenotenrolled/readmetadata
microsoft.operationalinsights/workspaces/query/madevicepnphealth/readmetadata
microsoft.operationalinsights/workspaces/query/madevicepnphealthalternativeversions/readmetadata
microsoft.operationalinsights/workspaces/query/madevicepnphealthissues/readmetadata
microsoft.operationalinsights/workspaces/query/madevicereadiness/readmetadata
microsoft.operationalinsights/workspaces/query/madriverinstancereadiness/readmetadata
microsoft.operationalinsights/workspaces/query/madriverreadiness/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddin/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddinhealth/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddinhealthissues/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddininstance/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddininstancereadiness/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddinreadiness/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeapp/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeapphealth/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeappinstance/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeappreadiness/readmetadata
microsoft.operationalinsights/workspaces/query/maofficebuildinfo/readmetadata
microsoft.operationalinsights/workspaces/query/maofficecurrencyassessment/readmetadata
microsoft.operationalinsights/workspaces/query/maofficecurrencyassessmentdailycounts/readmetadata
microsoft.operationalinsights/workspaces/query/maofficedeploymentstatus/readmetadata
microsoft.operationalinsights/workspaces/query/maofficemacrohealth/readmetadata
microsoft.operationalinsights/workspaces/query/maofficemacrohealthissues/readmetadata
microsoft.operationalinsights/workspaces/query/maofficemacroissueinstancereadiness/readmetadata
microsoft.operationalinsights/workspaces/query/maofficemacroissuereadiness/readmetadata
microsoft.operationalinsights/workspaces/query/maofficemacrosummary/readmetadata
microsoft.operationalinsights/workspaces/query/maofficesuite/readmetadata
microsoft.operationalinsights/workspaces/query/maofficesuiteinstance/readmetadata
microsoft.operationalinsights/workspaces/query/maproposedpilotdevices/readmetadata
microsoft.operationalinsights/workspaces/query/mawindowsbuildinfo/readmetadata
microsoft.operationalinsights/workspaces/query/mawindowscurrencyassessment/readmetadata
microsoft.operationalinsights/workspaces/query/mawindowscurrencyassessmentdailycounts/readmetadata
microsoft.operationalinsights/workspaces/query/mawindowsdeploymentstatus/readmetadata
microsoft.operationalinsights/workspaces/query/mawindowssysreqinstancereadiness/readmetadata
microsoft.operationalinsights/workspaces/query/networkmonitoring/readmetadata
microsoft.operationalinsights/workspaces/query/officeactivity/readmetadata
microsoft.operationalinsights/workspaces/query/operation/readmetadata
microsoft.operationalinsights/workspaces/query/outboundconnection/readmetadata
microsoft.operationalinsights/workspaces/query/perf/readmetadata
microsoft.operationalinsights/workspaces/query/protectionstatus/readmetadata
microsoft.operationalinsights/workspaces/query/readmetadata
microsoft.operationalinsights/workspaces/query/reservedcommonfields/readmetadata
microsoft.operationalinsights/workspaces/query/sccmassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/scomassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/securityalert/readmetadata
microsoft.operationalinsights/workspaces/query/securitybaseline/readmetadata
microsoft.operationalinsights/workspaces/query/securitybaselinesummary/readmetadata
microsoft.operationalinsights/workspaces/query/securitydetection/readmetadata
microsoft.operationalinsights/workspaces/query/securityevent/readmetadata
microsoft.operationalinsights/workspaces/query/servicefabricoperationalevent/readmetadata
microsoft.operationalinsights/workspaces/query/servicefabricreliableactorevent/readmetadata
microsoft.operationalinsights/workspaces/query/servicefabricreliableserviceevent/readmetadata
microsoft.operationalinsights/workspaces/query/sfbassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/sfbonlineassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/sharepointonlineassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/signinlogs/readmetadata
microsoft.operationalinsights/workspaces/query/spassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/sqlassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/sqlqueryperformance/readmetadata
microsoft.operationalinsights/workspaces/query/syslog/readmetadata
microsoft.operationalinsights/workspaces/query/sysmonevent/readmetadata
microsoft.operationalinsights/workspaces/query/tables.custom/readmetadata
microsoft.operationalinsights/workspaces/query/uaapp/readmetadata
microsoft.operationalinsights/workspaces/query/uacomputer/readmetadata
microsoft.operationalinsights/workspaces/query/uacomputerrank/readmetadata
microsoft.operationalinsights/workspaces/query/uadriver/readmetadata
microsoft.operationalinsights/workspaces/query/uadriverproblemcodes/readmetadata
microsoft.operationalinsights/workspaces/query/uafeedback/readmetadata
microsoft.operationalinsights/workspaces/query/uahardwaresecurity/readmetadata
microsoft.operationalinsights/workspaces/query/uaiesitediscovery/readmetadata
microsoft.operationalinsights/workspaces/query/uaofficeaddin/readmetadata
microsoft.operationalinsights/workspaces/query/uaproposedactionplan/readmetadata
microsoft.operationalinsights/workspaces/query/uasysreqissue/readmetadata
microsoft.operationalinsights/workspaces/query/uaupgradedcomputer/readmetadata
microsoft.operationalinsights/workspaces/query/update/readmetadata
microsoft.operationalinsights/workspaces/query/updaterunprogress/readmetadata
microsoft.operationalinsights/workspaces/query/updatesummary/readmetadata
microsoft.operationalinsights/workspaces/query/usage/readmetadata
microsoft.operationalinsights/workspaces/query/vmboundport/readmetadata
microsoft.operationalinsights/workspaces/query/vmconnection/readmetadata
microsoft.operationalinsights/workspaces/query/w3ciislog/readmetadata
microsoft.operationalinsights/workspaces/query/waasdeploymentstatus/readmetadata
microsoft.operationalinsights/workspaces/query/waasinsiderstatus/readmetadata
microsoft.operationalinsights/workspaces/query/waasupdatestatus/readmetadata
microsoft.operationalinsights/workspaces/query/wdavstatus/readmetadata
microsoft.operationalinsights/workspaces/query/wdavthreat/readmetadata
microsoft.operationalinsights/workspaces/query/windowsclientassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/windowsevent/readmetadata
microsoft.operationalinsights/workspaces/query/windowsfirewall/readmetadata
microsoft.operationalinsights/workspaces/query/windowsserverassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/wiredata/readmetadata
microsoft.operationalinsights/workspaces/query/workloadmonitoringperf/readmetadata
microsoft.operationalinsights/workspaces/query/wudoaggregatedstatus/readmetadata
microsoft.operationalinsights/workspaces/query/wudostatus/readmetadata
microsoft.operationalinsights/workspaces/query/intuneauditlogs/readmetadata
microsoft.operationalinsights/workspaces/query/intuneoperationallogs/readmetadata
microsoft.operationalinsights/workspaces/query/containernodeinventory/readmetadata
microsoft.operationalinsights/workspaces/query/securityiotrawevent/readmetadata
microsoft.operationalinsights/workspaces/query/securityrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/autoscaleevaluationslog/readmetadata
microsoft.operationalinsights/workspaces/query/autoscalescaleactionslog/readmetadata
microsoft.operationalinsights/workspaces/query/awscloudtrail/readmetadata
microsoft.operationalinsights/workspaces/query/threatintelligenceindicator/readmetadata
microsoft.operationalinsights/workspaces/query/huntingbookmark/readmetadata
microsoft.operationalinsights/workspaces/query/sqlthreatprotectionloginaudits/readmetadata
microsoft.operationalinsights/workspaces/operations/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeappcrashesnrt/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeappsessionsnrt/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeappinstancehealth/readmetadata
microsoft.operationalinsights/workspaces/query/maofficemacroerrornrt/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddinhealtheventnrt/readmetadata
microsoft.operationalinsights/workspaces/query/sqlvulnerabilityassessmentresult/readmetadata
microsoft.operationalinsights/workspaces/query/maofficeaddinentityhealth/readmetadata
microsoft.operationalinsights/workspaces/query/databricksworkspace/readmetadata
microsoft.operationalinsights/workspaces/query/maofficemacroglobalhealth/readmetadata
microsoft.operationalinsights/workspaces/query/databricksaccounts/readmetadata
microsoft.operationalinsights/workspaces/query/databricksclusters/readmetadata
microsoft.operationalinsights/workspaces/query/databricksdbfs/readmetadata
microsoft.operationalinsights/workspaces/query/databricksnotebook/readmetadata
microsoft.operationalinsights/workspaces/query/databricksssh/readmetadata
microsoft.operationalinsights/workspaces/query/databricksjobs/readmetadata
microsoft.operationalinsights/workspaces/query/databrickssecrets/readmetadata
microsoft.operationalinsights/workspaces/query/databrickssqlpermissions/readmetadata
microsoft.operationalinsights/workspaces/query/databrickstables/readmetadata
microsoft.operationalinsights/workspaces/query/madevicenrt/readmetadata
microsoft.operationalinsights/workspaces/query/mawindowsdeploymentstatusnrt/readmetadata
microsoft.operationalinsights/workspaces/query/insightsmetrics/readmetadata
microsoft.operationalinsights/workspaces/query/maofficedeploymentstatusnrt/readmetadata
microsoft.operationalinsights/workspaces/query/aaddomainserviceslogonlogoff/readmetadata
microsoft.operationalinsights/workspaces/query/aaddomainservicesaccountlogon/readmetadata
microsoft.operationalinsights/workspaces/query/blockchainapplicationlog/readmetadata
microsoft.operationalinsights/workspaces/query/blockchainproxylog/readmetadata
microsoft.operationalinsights/workspaces/query/azureassessmentrecommendation/readmetadata
microsoft.operationalinsights/workspaces/query/adfactivityrun/readmetadata
microsoft.operationalinsights/workspaces/query/adfpipelinerun/readmetadata
microsoft.operationalinsights/workspaces/query/adftriggerrun/readmetadata
microsoft.operationalinsights/workspaces/query/aaddomainservicesaccountmanagement/readmetadata
microsoft.operationalinsights/workspaces/query/aaddomainservicesdirectoryserviceaccess/readmetadata
microsoft.operationalinsights/workspaces/query/aaddomainservicespolicychange/readmetadata
microsoft.operationalinsights/workspaces/query/aaddomainservicesprivilegeuse/readmetadata
microsoft.operationalinsights/workspaces/query/aaddomainservicessystemsecurity/readmetadata
microsoft.operationalinsights/workspaces/query/apimanagementgatewaylogs/readmetadata
microsoft.operationalinsights/workspaces/query/addonazurebackupalerts/readmetadata
microsoft.operationalinsights/workspaces/query/mcasshadowitreporting/readmetadata
microsoft.operationalinsights/workspaces/query/addonazurebackupjobs/readmetadata
microsoft.operationalinsights/workspaces/query/addonazurebackuppolicy/readmetadata
microsoft.operationalinsights/workspaces/query/addonazurebackupprotectedinstance/readmetadata
microsoft.operationalinsights/workspaces/query/addonazurebackupstorage/readmetadata
microsoft.operationalinsights/workspaces/query/coreazurebackup/readmetadata
microsoft.operationalinsights/workspaces/query/containerregistryloginevents/readmetadata
microsoft.operationalinsights/workspaces/query/containerregistryrepositoryevents/readmetadata
microsoft.operationalinsights/workspaces/query/microsoftinsightsazureactivitylog/readmetadata
microsoft.operationalinsights/workspaces/query/baijobevent/readmetadata
microsoft.operationalinsights/workspaces/query/appplatformlogsforspring/readmetadata
microsoft.operationalinsights/workspaces/query/amlcomputeclusterevent/readmetadata
microsoft.operationalinsights/workspaces/query/amlcomputeclusternodeevent/readmetadata
microsoft.operationalinsights/workspaces/query/amlcomputejobevent/readmetadata
microsoft.operationalinsights/workspaces/query/baiclusterevent/readmetadata
microsoft.operationalinsights/workspaces/query/baiclusternodeevent/readmetadata
microsoft.operationalinsights/workspaces/query/databricksinstancepools/readmetadata
microsoft.operationalinsights/workspaces/query/microsofthealthcareapisauditlogs/readmetadata
microsoft.operationalinsights/workspaces/query/appserviceenvironmentplatformlogs/readmetadata
microsoft.operationalinsights/workspaces/query/failedingestion/readmetadata
microsoft.operationalinsights/workspaces/query/succeededingestion/readmetadata
microsoft.operationalinsights/workspaces/query/microsoftdatasharesharelog/readmetadata
microsoft.operationalinsights/workspaces/query/kubehealth/readmetadata
microsoft.operationalinsights/workspaces/query/microsoftdynamicstelemetrysystemmetricslogs/readmetadata
microsoft.operationalinsights/workspaces/query/kubemonagentevents/readmetadata
microsoft.operationalinsights/workspaces/query/microsoftdynamicstelemetryperformancelogs/readmetadata
microsoft.operationalinsights/workspaces/query/appserviceapplogs/readmetadata
microsoft.operationalinsights/workspaces/query/appserviceconsolelogs/readmetadata
microsoft.operationalinsights/workspaces/query/microsoftdatasharesentsnapshotlog/readmetadata
microsoft.operationalinsights/workspaces/query/intunedevicecomplianceorg/readmetadata
microsoft.operationalinsights/workspaces/query/storagebloblogs/readmetadata
microsoft.operationalinsights/workspaces/query/storagefilelogs/readmetadata
microsoft.operationalinsights/workspaces/query/storagequeuelogs/readmetadata
microsoft.operationalinsights/workspaces/query/storagetablelogs/readmetadata
microsoft.operationalinsights/workspaces/query/appserviceauditlogs/readmetadata
microsoft.operationalinsights/workspaces/query/appservicehttplogs/readmetadata
microsoft.operationalinsights/workspaces/query/microsoftazurebastionauditlogs/readmetadata
microsoft.operationalinsights/workspaces/query/functionapplogs/readmetadata
microsoft.operationalinsights/workspaces/query/appplatformsystemlogs/readmetadata
microsoft.operationalinsights/workspaces/query/microsoftdatasharereceivedsnapshotlog/readmetadata
microsoft.operationalinsights/workspaces/query/dhcpactivity/readmetadata
microsoft.operationalinsights/workspaces/query/signalrservicediagnosticlogs/readmetadata
microsoft.operationalinsights/workspaces/query/vmcomputer/readmetadata
microsoft.operationalinsights/workspaces/query/vmprocess/readmetadata
microsoft.operationalinsights/workspaces/query/aegdeliveryfailurelogs/readmetadata
microsoft.operationalinsights/workspaces/query/aegpublishfailurelogs/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata