Skip to content

Commit 71ec7a0

Browse files
committed
Update logs-dedicated-clusters.md
1 parent 4f582df commit 71ec7a0

File tree

1 file changed

+8
-5
lines changed

1 file changed

+8
-5
lines changed

articles/azure-monitor/logs/logs-dedicated-clusters.md

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -28,11 +28,16 @@ Capabilities that require dedicated clusters:
2828
Log Analytics Dedicated Clusters use a commitment tier pricing model of at least 500 GB/day. Any usage above the tier level will be billed at effective per-GB rate of that commitment tier. See [Azure Monitor Logs pricing details](cost-logs.md#dedicated-clusters) for pricing details for dedicated clusters.
2929
## Required permissions
3030

31-
Operations on the cluster level require `Microsoft.OperationalInsights/clusters/write` permission.
31+
To perform cluster-related actions, you need these permissions:
3232

33-
Linking workspaces to a cluster requires both `Microsoft.OperationalInsights/clusters/write` and `Microsoft.OperationalInsights/workspaces/write` permissions.
33+
| Action | Permissions or role needed |
34+
|-|-|
35+
| Create a dedicate cluster |`Microsoft.Resources/deployments/*`and `Microsoft.OperationalInsights/clusters/write`|
36+
| Change cluster properties |`Microsoft.OperationalInsights/clusters/write`|
37+
| Link workspaces to a cluster | `Microsoft.OperationalInsights/clusters/write` and `Microsoft.OperationalInsights/workspaces/write`|
38+
| Grant the required permissions | Owner or Contributor role that has `*/write` permissions, or a Log Analytics Contributor role that has `Microsoft.OperationalInsights/*` permissions.|
3439

35-
To grant the required permissions, you must have an Owner or Contributor role that has `*/write` permissions, or a Log Analytics Contributor role that has `Microsoft.OperationalInsights/*` permissions. For more information on Log Analytics permissions, see [Manage access to log data and workspaces in Azure Monitor](./manage-access.md).
40+
For more information on Log Analytics permissions, see [Manage access to log data and workspaces in Azure Monitor](./manage-access.md).
3641

3742
## Create a dedicated cluster
3843

@@ -67,8 +72,6 @@ Provide the following properties when creating new dedicated cluster:
6772
}
6873
```
6974

70-
The user account that creates the clusters must have the standard Azure resource creation permission: `Microsoft.Resources/deployments/*` and cluster write permission `Microsoft.OperationalInsights/clusters/write` by having in their role assignments this specific action or `Microsoft.OperationalInsights/*` or `*/write`.
71-
7275
After you create your cluster resource, you can edit additional properties such as *sku*, *keyVaultProperties, or *billingType*. See more details below.
7376

7477
You can have up to five active clusters per subscription per region. If the cluster is deleted, it is still reserved for 14 days. You can have up to seven clusters per subscription and region, five active, plus two deleted in past 14 days.

0 commit comments

Comments
 (0)