Share via

Adding Users to Azure Log Analytics via the Azure portal

  • Article

Azure Log Analytics is the system used to run Services Hub On-Demand Assessments. Currently, user management is handled through the Azure portal (not the Azure Log Analytics-specific user management features). This provides customers the capability to add, remove, and configure assessment and linking. Scenario 2 is for Azure Log Analytics access only, and people with @microsoft email addresses should follow Scenario 2.

To add a new user to an Azure subscription, follow these steps.

Add a New User to an Azure Subscription

Note

Only someone with an "Owner" designation can add users to a subscription.

Scenario 1 - Add someone from your organization/tenant

  1. Sign in to Microsoft Azure portal and navigate to Subscriptions in the left-hand navigation bar. If you don't see Subscriptions, scroll down and select More Services and search for it.

    Microsoft Azure window, which shows a list of the organization's Azure Subscriptions.

  2. Once selected, Subscriptions displays a list of the Azure Subscriptions your organization manages.

  3. Select the Azure subscription associated with the Azure Log Analytics workspace and linked to the Services Hub account you want to add users to.

  4. Select Access Control, then Add.

  5. Next, select a Role and add the email address of the person you want to add. Once done, select Save.

    Note

    We recommend you add users as an Owner or Contributor to ensure that users have the permission needed in Azure Log Analytics to add, remove, and configure assessments.

    Microsoft Azure window, which shows that a user has been successfully added to a role.

  6. If you added people using their Microsoft Accounts/Live IDs, see Authenticating a Managed Services Account Holder in Azure.

Scenario 2 - Adding someone from outside your organization/tenant

  1. Sign in to the Azure portal and navigate to Log Analytics in the left-hand navigation bar.

    Microsoft Azure Portal window, which shows a list of Log Analytics workspaces within the user's organization.

  2. Once selected, Log Analytics displays a list of the Azure Log Analytic workspaces within your organization manages.

  3. Select the Azure Log Analytics workspace linked to your Services Hub that you want to add users to.

  4. Select Access Control, then Add.

  5. Next, select a Role and add the email address of the person you want to add. Once done, select Save.

  6. If the user you add isn't part of your tenant, that user receives an email message to finish the process and have access to the Azure Log Analytic workspace. If the portal doesn't let you invite the email ID you're trying to add, your Microsoft Entra Global Administrator might have blocked Invite Guest Users feature. To learn how to invite guest users, see Invite Guest users to your active directory.

    Note

    We recommended you add users as a Log Analytics Reader to grant @microsoft users access to your Azure Log Analytics workspace to view your assessments. They don't have access to your Azure subscription.

    Caution

    If the "Invite External User" rule is blocked on Microsoft Entra, the option to invite a user is grayed out. You need to ask your Global Administrator to invite the @microsoft user using the following steps.

  7. Sign in to the Azure portal and navigate to Microsoft Entra in the left-hand navigation bar.

  8. Locate Roles and Administrators on the left pane, then search for Global Administrator

  9. Once selected, you can see who the Microsoft Entra Global Administrator. Anyone on that list can invite a guest user.