Skip to content

Commit 9ea7a9c

Browse files
Merge pull request #250293 from guywi-ms/patch-70
Update manage-access.md
2 parents d6435da + 8db0af5 commit 9ea7a9c

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

articles/azure-monitor/logs/manage-access.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -195,8 +195,6 @@ The Log Analytics Reader role includes the following Azure actions:
195195
| Action | `*/read` | Ability to view all Azure resources and resource configuration.<br>Includes viewing:<br>- Virtual machine extension status.<br>- Configuration of Azure diagnostics on resources.<br>- All properties and settings of all resources.<br><br>For workspaces, allows full unrestricted permissions to read the workspace settings and query data. See more granular options in the preceding list. |
196196
| Action | `Microsoft.Support/*` | Ability to open support cases. |
197197
|Not Action | `Microsoft.OperationalInsights/workspaces/sharedKeys/read` | Prevents reading of workspace key required to use the data collection API and to install agents. This prevents the user from adding new resources to the workspace. |
198-
| Action | `Microsoft.OperationalInsights/workspaces/analytics/query/action` | Deprecated. |
199-
| Action | `Microsoft.OperationalInsights/workspaces/search/action` | Deprecated. |
200198

201199
#### Log Analytics Contributor
202200

@@ -332,9 +330,7 @@ Granting table-level read access involves assigning a user two roles:
332330

333331
```json
334332
"Microsoft.OperationalInsights/workspaces/read",
335-
"Microsoft.OperationalInsights/workspaces/query/read",
336-
"Microsoft.OperationalInsights/workspaces/analytics/query/action",
337-
"Microsoft.OperationalInsights/workspaces/search/action"
333+
"Microsoft.OperationalInsights/workspaces/query/read"
338334
```
339335

340336
1. In the `"not actions"` section, add:

0 commit comments

Comments
 (0)