How to create custom role in Azure Data Lake Analytics (ADLA) only for monitoring scenarios
From official doc about role-based access control in ADLA, the Data Lake Analytics Developer role could:
- Submit jobs.
- Monitor job status and the progress of jobs submitted by any user.
- See the U-SQL scripts from jobs submitted by any user.
- Cancel only you own jobs.
In our scenario, we want to let some SPI could use ADLA SDK to "Monitor job status and the progress of jobs submitted by any user.", but due to customer concerns, these SPI shouldn't have permission to submit jobs in ADLA. So, we can't add these SPI into the Data Lake Analytics Developer role directly.
My question is, how do I get a custom role that meet my scenario, I have checked the basic operations here, but not found the relevant permissions. Or is there any other solution I could try?
Appreciate your help, thanks!