An administrator is configuring access control for an Azure Log Analytics workspace named Workspace1. Workspace1 collects diagnostic logs and performance metrics from 50 Azure virtual machines distributed across multiple resource groups. A group of developers must be able to query the performance logs of only the virtual machines they manage. The developers must not be able to view logs for other virtual machines, and they must not have access to Workspace1. Which two settings or assignments should the administrator configure? Select two.
- Configure the access control mode of Workspace1 to use resource or workspace permissions.Cevap
- Assign the Reader role to the developers on the specific virtual machines they manage.Cevap
- CConfigure the access control mode of Workspace1 to require workspace permissions.
- DAssign the Log Analytics Reader role to the developers on Workspace1.
- EConfigure a diagnostic setting on the virtual machines to send logs to an Azure Storage account.
Cevap
Configure the access control mode of Workspace1 to use resource or workspace permissions and assign the Reader role to the developers on the specific virtual machines they manage.
To restrict access so that users can query logs only for the specific virtual machines they manage without workspace access, you must implement resource-context access. This requires configuring the access control mode of Workspace1 to use resource or workspace permissions. Additionally, the developers must have read permissions (such as the Reader role) on the specific virtual machines they manage.
Adım Adım Çözüm
Anahtar Kavram
Log Analytics Access Control Modes (Workspace-context vs. Resource-context)