Forum Discussion
Create a Power BI report from Microsoft Sentinel data
Hi All,
To connect the Sentinal Log analyctics one of the pre-requsit is "A Power BI account that has read access to the Log Analytics workspace" . Is that something like a service account or our organization primary account which we used to log in to powerbi desktop normally. Kindly help us to clarify this point.
Hi Abhilashkb ,
All Microsoft Sentinel built-in roles grant read access to the data in your Microsoft Sentinel workspace.
-
Microsoft Sentinel Reader can view data, incidents, workbooks, and other Microsoft Sentinel resources.
-
Microsoft Sentinel Responder can, in addition to the above, manage incidents (assign, dismiss, etc.).
-
Microsoft Sentinel Contributor can, in addition to the above, create and edit workbooks, analytics rules, and other Microsoft Sentinel resources.
-
Microsoft Sentinel Automation Contributor allows Microsoft Sentinel to add playbooks to automation rules. It isn't meant for user accounts.
For refefence:
Roles and permissions in Microsoft Sentinel
Tutorial: Create a Power BI report from Microsoft Sentinel data
Best Regards,
Rico ZhouIf this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
-
2 Replies
Hi Abhilashkb ,
All Microsoft Sentinel built-in roles grant read access to the data in your Microsoft Sentinel workspace.
-
Microsoft Sentinel Reader can view data, incidents, workbooks, and other Microsoft Sentinel resources.
-
Microsoft Sentinel Responder can, in addition to the above, manage incidents (assign, dismiss, etc.).
-
Microsoft Sentinel Contributor can, in addition to the above, create and edit workbooks, analytics rules, and other Microsoft Sentinel resources.
-
Microsoft Sentinel Automation Contributor allows Microsoft Sentinel to add playbooks to automation rules. It isn't meant for user accounts.
For refefence:
Roles and permissions in Microsoft Sentinel
Tutorial: Create a Power BI report from Microsoft Sentinel data
Best Regards,
Rico ZhouIf this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
HI , Thank you for sharing the details. So for providing read acccss in sentinal normaly which account we will use there. is that a pecific service account or our compay primary account which already has o365 license
-
