AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Log Analytics Reader

Azure BuiltIn RBAC Role definition

Name

73c42c96-874c-492b-b04d-ab87d138a893

Description

Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.

Category

Monitor
Microsoft Learn

CreatedOn

2017-05-02 00:20:28 UTC

UpdatedOn

2025-06-18 13:42:52 UTC

Permissions summary

Effective control plane and data plane operations: 7456 (unique operations)
•action: 7
•read: 7448
•write: 1

Actions: 4
Resolved control plane operations from Actions: 7457
Effective control plane operations: 7456
•action: 7
•read: 7448
•write: 1

NotActions: 1
Resolved control plane operations from NotActions: 1
Effective denied control plane operations: 9977

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078

Actions

Operation	Description
*/read	wildcarded / no description
Microsoft.OperationalInsights/workspaces/analytics/query/action	Search using new engine.
Microsoft.OperationalInsights/workspaces/search/action	Executes a search query
Microsoft.Support/*	wildcarded / no description

NotActions

Operation	Description
Microsoft.OperationalInsights/workspaces/sharedKeys/read	Retrieves the shared keys for the workspace. These keys are used to connect Microsoft Operational Insights agents to the workspace.

DataActions

n/a

NotDataActions

n/a

Used in
BuiltIn Policy

none

History

Date/Time (UTC ymd) (i)	Change	Change detail
2025-06-18 17:23:19	change: DataActions	DataActions: 'remove Microsoft.OperationalInsights/workspaces/jobs/export/action'
2025-06-13 17:22:48	change: DataActions	DataActions: 'add Microsoft.OperationalInsights/workspaces/jobs/export/action'

JSON

api-version=2023-07-01-preview

Condition

none