Share via

How to Grant Precise Access Control Rights for viewing Azure Front Door Reports?

Bart van der Braak 10 Reputation points
2023-11-01T14:03:38.5933333+00:00

It appears that enabling a user with precise Access Control permissions, specifically tailored to viewing Reports and Security Reports for Azure Front Door, may not be achievable or, at the very least, is not well-documented. Even after granting them the majority of Monitoring-related roles, they continue to encounter a "Query Failed" message. I've experimented with the following options:

  • Azure Front Door Domain Reader
  • Azure Front Door Secret Reader
  • CDN Endpoint Reader
  • CDN Profile Reader
  • Log Analytics Reader
  • Monitoring Contributor
  • Monitoring Data Reader
  • Monitoring Reader

Is there a way the community can support my with this question topic?

Query failed

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
712 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
853 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Bart van der Braak 10 Reputation points
    2023-11-01T14:54:02.84+00:00

    Since Microsoft hasn’t yet come up with an official solution, I’ve managed to solve it with this custom role definition, even though it has far to many permissions.

    {
    "properties": {
        "roleName": "Front Door Reports Reader (queryLogAnalyticsMetrics)",
        "description": "",
        "assignableScopes": [
            "/subscriptions/b9c18b1b-de83-4428-a685-6dca235625a2"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Cdn/profiles/*/action"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.