Azure Monitor built-in role

Monitoring Policy Contributor

Allows read access to all monitoring data, update permissions for monitoring settings and permissions to deploy and remediate Azure Monitor alert policies.

Control-plane actions (47)

• */read
• Microsoft.AlertsManagement/alerts/*
• Microsoft.AlertsManagement/alertsSummary/*
• Microsoft.AlertsManagement/issues/*
• Microsoft.Insights/actiongroups/*
• Microsoft.Insights/activityLogAlerts/*
• Microsoft.Insights/AlertRules/*
• Microsoft.Insights/components/*
• Microsoft.Insights/createNotifications/*
• Microsoft.Insights/dataCollectionEndpoints/*
• Microsoft.Insights/dataCollectionRules/*
• Microsoft.Insights/dataCollectionRuleAssociations/*
• Microsoft.Insights/DiagnosticSettings/*
• Microsoft.Insights/eventtypes/*
• Microsoft.Insights/LogDefinitions/*
• Microsoft.Insights/metricalerts/*
• Microsoft.Insights/MetricDefinitions/*
• Microsoft.Insights/Metrics/*
• Microsoft.Insights/notificationStatus/*
• Microsoft.Insights/Register/Action
• Microsoft.Insights/scheduledqueryrules/*
• Microsoft.Insights/webtests/*
• Microsoft.Insights/workbooks/*
• Microsoft.Insights/workbooktemplates/*
• Microsoft.Insights/privateLinkScopes/*
• Microsoft.Insights/privateLinkScopeOperationStatuses/*
• Microsoft.Monitor/accounts/*
• Microsoft.OperationalInsights/workspaces/write
• Microsoft.OperationalInsights/workspaces/intelligencepacks/*
• Microsoft.OperationalInsights/workspaces/savedSearches/*
• Microsoft.OperationalInsights/workspaces/search/action
• Microsoft.OperationalInsights/workspaces/sharedKeys/action
• Microsoft.OperationalInsights/workspaces/sharedKeys/read
• Microsoft.OperationalInsights/workspaces/storageinsightconfigs/*
• Microsoft.OperationalInsights/locations/workspaces/failover/action
• Microsoft.OperationalInsights/workspaces/failback/action
• Microsoft.Support/*
• Microsoft.AlertsManagement/smartDetectorAlertRules/*
• Microsoft.AlertsManagement/actionRules/*
• Microsoft.AlertsManagement/smartGroups/*
• Microsoft.AlertsManagement/migrateFromSmartDetection/*
• Microsoft.AlertsManagement/investigations/*
• Microsoft.AlertsManagement/prometheusRuleGroups/*
• Microsoft.Monitor/investigations/*
• Microsoft.Resources/deployments/*
• Microsoft.PolicyInsights/remediations/*
• Microsoft.Resources/subscriptions/resourceGroups/*

Data-plane actions (0)

None — this role grants no data-plane (data access) actions.

Excluded actions (0)

None

Assignable scopes (1)

• /

Official Microsoft Learn documentation →