Azure Monitor built-in role

Application Insights Component Contributor

Can manage Application Insights components

Control-plane and data-plane permissions below are imported directly from Microsoft Learn. In-app editorial guidance (use cases, best practices, security notes) and least-privilege recommendations are still pending review.

Role definition ID: ae349356-3a1b-4a5e-921d-050484c6347e

Control-plane actions (13)

Microsoft.Authorization/*/read
Microsoft.Insights/alertRules/*
Microsoft.Insights/generateLiveToken/read
Microsoft.Insights/metricAlerts/*
Microsoft.Insights/components/*
Microsoft.Insights/scheduledqueryrules/*
Microsoft.Insights/topology/read
Microsoft.Insights/transactions/read
Microsoft.Insights/webtests/*
Microsoft.ResourceHealth/availabilityStatuses/read
Microsoft.Resources/deployments/*
Microsoft.Resources/subscriptions/resourceGroups/read
Microsoft.Support/*

Data-plane actions (0)

None — this role grants no data-plane (data access) actions.

Excluded actions (0)

None

Assignable scopes (1)

Official Microsoft Learn documentation →