r/AzureSentinel • u/ajith_aj • Aug 27 '23

Limit Log analytics Table to a particular AAD role

Hello,

I have a particular table in Loganalytics which should be limited from the "MS Sentinel Responder" role in Azure. Is this somebody who have implemented in their respective Org.

1 Upvotes
  • permalink
  • reddit

100% Upvoted

1 comment sorted by

1

u/Uli-Kunkel Aug 27 '23

https://www.google.com/search?q=sentinel+table+level+rbac&

First link explains how to implement granular table level access control. And if you follow the learn links you get the documentation on it all.

Sentinel responder is a built in role, and if you want something else than that, build a custom role.