问题
We are currently using splunk to store the logs and planning to migrate to Azure and would be using log analytics. In splunk, application team will be granted access only to their logs however I don't know how can I grant access to the application support team to view only the specific set of logs on azure log analytics.
How do I manage access control to view only specific application logs in Azure log analytics?
回答1:
So if a person or a group has access to only that particular resource and by default logging has been enabled to log analytics then those people will only be able to see logs for that particular resource. So as an example if I have access to an Azure SQL resource then I would go to that resource and would click on Logs from that resource's blade and view logs for it and same for metrics.
But for a detailed look on how to design permissions for Azure Monitor Logs then please click here as to what i described above some caveats do exist.
来源：https://stackoverflow.com/questions/63976173/azure-log-analytics-access-control-to-view-only-specific-applications