Configuring Settings for Azure

Assigning the "Monitoring Reader" Role

Legacy Configuration

If the application is using Legacy Configuration, use the following Application ID:

97bdeda3-63b1-480c-a013-3431aed2667a

Custom Application

If you have created a custom application in Entra ID, use its actual Application ID instead of the legacy one.

PowerShell Command

Run the following command in Azure PowerShell to assign the "Monitoring Reader" role:

			New-AzRoleAssignment -ApplicationId "97bdeda3-63b1-480c-a013-3431aed2667a" -RoleDefinitionName "Monitoring Reader" -Scope "/"
		

Scope Options

  • / → Tenant-wide (Default)
  • /subscriptions/<subscription-id> → Specific Subscription
  • /subscriptions/<subscription-id>/resourceGroups/<resource-group-name> → Resource Group

Verify Assignment

To check if the role was assigned successfully, use:

			Get-AzRoleAssignment -ApplicationId "97bdeda3-63b1-480c-a013-3431aed2667a" | Where-Object {$_.RoleDefinitionName -eq "Monitoring Reader"}
		

Continue reading:

Microsoft Subscriptions