AZ490961 - Generally Available: Granular RBAC in Azure Monitor Log Analytics

Azure Updates

Discussionpowered by zap.ms

Published

May 21, 2025

Status

Launched

Timeline

  • May 2025
    Preview
  • November 2025
    General Availability

Product

Azure Monitor

Tag

Microsoft Build
Features
Microsoft Ignite

Category

DevOps
Management and governance

Description

Many organizations emphasize the need to segregate and control access to data in a granular manner, while maintaining a centralized logging platform. On top of the existing capabilities of Azure Monitor Log Analytics Workspace and table level access, you can now maintain all your data in a single Log Analytics workspace and provide least-privilege access at any level, using Azure Attribute-Based Access Control (ABAC) as part of your Azure role assignment.

This capability allows you to filter the data that each user can view or query, based on the conditions that you specify. This means that you can now control which users can access which tables and rows (aka Row Level RBAC), based on your business or security needs and defined criteria. Common examples are characteristics such as organizational roles and units, geographical locations, or data sensitivity levels.