|
1 | 1 | --- |
2 | 2 | title: Troubleshoot Export of Audit Logs to Another Tenant |
3 | | -description: This guide provides steps to resolve permission-related errors when exporting audit logs to another tenant. |
| 3 | +description: This article provides guidance to resolve permissions-related errors when you export audit logs to another tenant. |
4 | 4 | ms.date: 07/17/2025 |
5 | 5 | ms.reviewer: v-liuamson; v-gsitser |
6 | 6 | ms.service: azure-monitor |
7 | 7 | ms.custom: I can’t configure export of Activity Logs |
8 | 8 | --- |
9 | 9 |
|
10 | | -# Troubleshoot Export of Audit Logs to Another Tenant |
| 10 | +# Troubleshoot export of Audit Logs to another tenant |
11 | 11 |
|
12 | | -When attempting to export audit logs from one tenant to another using Azure Lighthouse, users may encounter permission-related errors. This guide provides steps to resolve these issues, ensuring a smooth configuration process. |
| 12 | +When users try to export audit logs from one tenant to another by using Microsoft Azure Lighthouse, they might experience permissions-related errors. This article provides guidance to resolve these issues. |
13 | 13 |
|
14 | | -## Common Issues and Solutions |
| 14 | +## Common issues and solutions |
15 | 15 |
|
16 | | -- **Issue**: Permission errors when configuring diagnostic settings for exporting audit logs. |
17 | | -- **Root Cause**: The user lacks necessary permissions on the target workspace or incorrect role assignments. |
| 16 | +- **Issue**: Permissions errors occur when a user configures diagnostic settings for exporting audit logs. |
| 17 | +- **Root cause**: The user lacks the required permissions on the target workspace or has an incorrect role assignment. |
18 | 18 |
|
19 | | -### Step-by-Step Instructions to Resolve Export Issues |
| 19 | +### Instructions to resolve export issues |
20 | 20 |
|
21 | | -1. **Verify User Permissions**: |
22 | | - - Ensure the user has the necessary permissions to perform actions on the target workspace. |
23 | | - - Navigate to the Azure portal and check the user's role assignments under the **Access Control (IAM)** section. |
| 21 | +1. **Verify user permissions**: |
| 22 | + - Make sure that the user has the necessary permissions to perform actions on the target workspace. |
| 23 | + - Navigate to the Azure portal, and check the user's role assignments in the **Access Control (IAM)** section. |
24 | 24 |
|
25 | | -2. **Reset Guest Invitation**: |
| 25 | +2. **Reset guest invitation**: |
26 | 26 | - If the user is a guest, reset the invitation status to ensure proper linkage between home and resource tenants. |
27 | | - - Follow the instructions on [Reset Guest Invitation Status](https://learn.microsoft.com/entra/external-id/reset-redemption-status). |
| 27 | + - Follow the steps in [Reset Guest Invitation Status](https://learn.microsoft.com/entra/external-id/reset-redemption-status). |
28 | 28 |
|
29 | | -3. **Check Role Assignments**: |
30 | | - - Confirm that the user has the appropriate roles assigned, such as **Log Analytics Contributor** or **Reader**. |
31 | | - - Use the Azure portal to assign roles if necessary. |
| 29 | +3. **Check role assignments**: |
| 30 | + - Verify that the user has the appropriate roles assigned, such as **Log Analytics Contributor** or **Reader**. |
| 31 | + - Use the Azure portal to assign roles, if it's necessary. |
32 | 32 |
|
33 | | -4. **Review ARM Template Role Definitions**: |
34 | | - - Ensure that the ARM template used for deployment specifies the correct RoleDefinitionId. |
35 | | - - Adjust the template as needed to include the necessary permissions. |
| 33 | +4. **Review ARM template role definitions**: |
| 34 | + - Make sure that the ARM template that's used for deployment specifies the correct `RoleDefinitionId` value. |
| 35 | + - Adjust the template as necessary to include the required permissions. |
36 | 36 |
|
37 | | -5. **Test Configuration**: |
38 | | - - After making changes, test the configuration to ensure logs are exported successfully. |
39 | | - - Monitor the Azure Activity Logs for any further errors or warnings. |
| 37 | +5. **Test configuration**: |
| 38 | + - After you make these changes, test the configuration to make sure that logs are exported successfully. |
| 39 | + - Monitor the Azure Activity Logs for any more error messages or warnings. |
40 | 40 |
|
41 | | -## Reference |
| 41 | +## References |
42 | 42 |
|
43 | 43 | - [Manage Access to Log Analytics Workspaces](https://learn.microsoft.com/azure/azure-monitor/logs/manage-access?tabs=portal#workspace-permissions) |
44 | 44 | - [Azure Role Assignments](https://learn.microsoft.com/azure/role-based-access-control/role-assignments-portal) |
45 | 45 |
|
46 | | -If the issue persists after following the solution steps, please open a support case for further assistance. |
| 46 | +If the issue persists after you follow these steps, open a support case for further assistance. |
0 commit comments