Log analytics error

Jimy 0 Reputation points
2023-09-01T15:51:41.0833333+00:00

Hello Everyone,

I'm getting this below error when trying to access my Log analytics workspace from Azure AD and Entra portal. That resource group and workbook has been deleted already and no longer exist (tried PowerShell command to delete as well and it says the resource group no longer exists). I'm doing this on my test tenant. I've also assigned myself below roles under my subscription and I'm global admin for this subscription.
User's image

Error --> In order for you to be able to leverage Log Analytics or Workbooks you first need to get permission for one of the following workspaces: /subscriptions/a0000000-0000-000-0000-000000000000/resourcegroups/azure_purview/providers/microsoft.operationalinsights/workspaces/purviewloganalyticsworkspace.

Not sure what do.

Thanks

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
827 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,063 questions

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Manu Philip 18,671 Reputation points MVP
    2023-09-01T16:13:24.45+00:00

    Note the following point from the Microsoft reference

    User's image

    You have to set the access mode correctly. Following reference will help to set it as needed

    Configure access control mode for a workspace

    --please don't forget to upvote and Accept as answer if the reply is helpful--

  2. JamesTran-MSFT 36,631 Reputation points Microsoft Employee
    2023-09-18T17:49:08.6066667+00:00

    @Jimy

    I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this!

    Error Message:

    In order for you to be able to leverage Log Analytics or Workbooks you first need to get permission for one of the following workspaces: /subscriptions/a0000000-0000-000-0000-000000000000/resourcegroups/azure_purview/providers/microsoft.operationalinsights/workspaces/purviewloganalyticsworkspace.

    Issue:

    I'm getting this below error when trying to access my Log analytics workspace from Azure AD and Entra portal. That resource group and workbook has been deleted already and no longer exist (tried PowerShell command to delete as well and it says the resource group no longer exists). I'm doing this on my test tenant. I've also assigned myself below roles under my subscription and I'm global admin for this subscription.

    Solution:

    You were able to resolve your issue by changing the default workbook to a new workbook.

    I have resolved this issue by changing default workbook selected (which no longer exists) with a new workbook.

    • If I missed anything please let me know and I'd be happy to add it to my answer, or feel free to comment below with any additional information.

    I hope this helps!

    If you have any other questions, please let me know. Thank you again for your time and patience throughout this issue.

  3. Rob Mulder 231 Reputation points
    2024-10-23T07:23:34.1866667+00:00

    I don't get it... where can I change the Default Workbook?? In Azure Workbooks there is nothing (empty).

    I have the same problem when I follow this: https://video2.skills-academy.com/en-us/entra/identity/monitoring-health/workbook-mfa-gaps

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.