无法使用Log Analytics的正确权限创建Service Principal [英] Unable to create Service Principal with correct permissions to Log Analytics
问题描述
大家好
我正在尝试使用Log Analytics的正确权限创建服务主体（SP），以便我可以与Grafana建立联系以创建仪表板。 ;无论我以何种方式创建SP（Portal，CLI等）或使用现有SP，Grafana都会向我提供以下
错误
I'm trying to create a Service Principal (SP) with the correct permissions to Log Analytics to allow me to connect with Grafana to create Dashboards. Whichever way I create the SP (Portal, CLI, etc) or use an existing SP, Grafana gives me the below error
Azure Log Analytics ：Forbidden：InsufficientAccessError。提供的凭据没有足够的权限来执行请求的操作
我已按照文档创建了位于不同位置的SP，例如 https： //dev.loganalytics.io/oms/documentation/2-Authorization/1-AAD-Setup或 https://docs.microsoft.com/en-us/azure/ azure-monitor / platform / grafana-plugin。
I have followed the documentation to create the SP that's in various locations eg https://dev.loganalytics.io/oms/documentation/2-Authorization/1-AAD-Setup or https://docs.microsoft.com/en-us/azure/azure-monitor/platform/grafana-plugin.
SP对工作区本身（以及订阅的其余部分）具有Log Analytics Contributor角色。 SP具有授权读取日志分析数据的权限，因为用户和权限已被授予。 不知道我错过了什么，尝试了不同的Grafana（本地机器和Azure托管）
。
The SP has Log Analytics Contributor role to the workspace itself (as well as the rest of the subscription). The SP has Delegated Permissions to Read Log Analytics Data as user and permissions have been granted. Not sure what I'm missing, have tried this with different installs of Grafana (local machine and hosted in Azure).
我可以使用SP从Grafana成功连接到Azure Monitor。 如果我尝试将相同的SP用于Log Analytics，我会再次收到上述错误。 我试图在我的MSDN订阅中测试一下，如果这有任何区别吗？
I can connect to Azure Monitor successfully from Grafana using an SP. If I try to use the same SP for Log Analytics I get the above error again. I'm trying to test this out in my MSDN subscription, if that makes any difference?
很高兴提供任何其他可能有用的信息
Happy to provide any other info that might be useful
谢谢你
推荐答案
完全相同的问题，遵循完全相同的指南。
Having the exact same issue, following the exact same guides.
如果我弄明白，我会回到这里。
If I figure it out, I'll head back here.
Grafana 5.0.4版
Grafana version 5.0.4
Azure监视器插件0.3.0
Azure monitor plugin 0.3.0
这篇关于无法使用Log Analytics的正确权限创建Service Principal的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
