My query validation fail with a permission error when creating alerts in azure

Question

My query validation fail with a permission error when creating alerts in azure

Kai Lessi001 25

When I am creating alert rule query getting error related to query permission, please help me.

Suchitra Suregaunkar 1,885 Reputation points Microsoft External Staff Moderator

2025-10-13T18:28:40.9533333+00:00

Hello Kai Lessi001

Thank you for posting your query on Microsoft Q&A portal. Could you please share us the below details: What type of alert rule are you creating like Metric alert, Log alert, Activity log alert? Which resource or service is the alert targeting? (VM, Storage account, Application Insights, etc.) Do you have access to the Log Analytics workspace or diagnostic logs linked to this resource? Are you using a custom query or a built-in query for the alert? If custom, can you share the query? What role or permissions do you currently have on the subscription/resource group? (e.g., Reader, Contributor) Did this error occur during validation only, or also when saving the alert rule?

Thanks, Suchitra.
Suchitra Suregaunkar 1,885 Reputation points Microsoft External Staff Moderator

2025-10-13T21:14:24.31+00:00

Hello Kai Lessi001,

Could you please share us the above requested details and error via private message.

Thanks,

Suchitra.

Answer accepted by question author

0 additional answers

Your answer

Suchitra Suregaunkar 1,885 Reputation points Microsoft External Staff Moderator

2025-10-13T18:28:40.9533333+00:00

Hello Kai Lessi001

Thank you for posting your query on Microsoft Q&A portal. Could you please share us the below details: What type of alert rule are you creating like Metric alert, Log alert, Activity log alert? Which resource or service is the alert targeting? (VM, Storage account, Application Insights, etc.) Do you have access to the Log Analytics workspace or diagnostic logs linked to this resource? Are you using a custom query or a built-in query for the alert? If custom, can you share the query? What role or permissions do you currently have on the subscription/resource group? (e.g., Reader, Contributor) Did this error occur during validation only, or also when saving the alert rule?

Thanks, Suchitra.
Suchitra Suregaunkar 1,885 Reputation points Microsoft External Staff Moderator

2025-10-13T21:14:24.31+00:00

Hello Kai Lessi001,

Could you please share us the above requested details and error via private message.

Thanks,

Suchitra.

Answer 1

Suchitra Suregaunkar 1,885 Microsoft External Staff Moderator

Hello Kai Lessi001,

If you receive error message related to permissions when creating or editing your alert rule query, make sure you have permissions to read the target resource logs.

Permissions required to read logs in workspace-context access mode: Microsoft.OperationalInsights/workspaces/query/read.
Permissions required to read logs in resource-context access mode (including workspace-based Application Insights resource): Microsoft.Insights/logs/tableName/read.

See Manage access to Log Analytics workspaces to learn more about permissions.

Thanks,

Suchitra.

Suchitra Suregaunkar 1,885 Reputation points Microsoft External Staff Moderator

2025-10-14T16:28:54.8766667+00:00

Hello Kai Lessi001,

Kindly let us know if the solution provided worked for you. If you need any further assistance, please feel free to reach out and share us the additional requested details.

If you found the comment helpful, please consider clicking "Upvote it/Accept Answer".

Thanks,

Suchitra.

Share via

My query validation fail with a permission error when creating alerts in azure

0 additional answers

Your answer