Reduction of high Azure 'Role' prerequisites to use Azure MP by service providers

Idea ID 1675970

Reduction of high Azure 'Role' prerequisites to use Azure MP by service providers


to discover and monitor Azure resources a Service Principal is needed and the related AAD application must have a Contributor role for the monitored subscription.

The customers hardly accept to give such permissions to monitoring service providers.

I would expect that for monitoring services the predefined Azure Roles 'Monitoring Reader' or 'Monitoring Contributor' are sufficient. That's easier to sell to the customers security responsible.

If for other monitoring services (e.g to access Azure Storage Account content to monitor special log files) additional permissions  are needed that should be separated by dedicated Aspect assignments.

Karsten Edel
T-Systems International GmbH


Tags (1)
Micro Focus Expert
Micro Focus Expert


Honored Contributor.. Honored Contributor..
Honored Contributor..

I agree to some extent.  Part of that privledge level is likely to facilitate full discovery of the environment.   If you can only read the monitors, you have to know what monitors you want to read, which means a lot of entry of subscriptions, tenant credentials and then services and monitors.  Not a bad thing the first time you have to do it, although in a big environment it is very time consuming.  What does make it bad, is that everytime you update the MP version, you have to do it all again for all of your customers.  That's not a good thing.




Micro Focus Expert
Micro Focus Expert
Status changed to: Waiting for Votes
Micro Focus Contributor
Micro Focus Contributor
Status changed to: Declined

Moving this Idea to “Declined” status as it has been open for > 1 year and has not gathered broad customer interest and/or there are no plans to implement.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.