Configuring Settings for Azure
Assigning the "Monitoring Reader" Role
Legacy Configuration
If the application is using Legacy Configuration, use the following Application ID:
97bdeda3-63b1-480c-a013-3431aed2667a
Custom Application
If you have created a custom application in Entra ID, use its actual Application ID instead of the legacy one.
PowerShell Command
Run the following command in Azure PowerShell to assign the "Monitoring Reader" role:
New-AzRoleAssignment -ApplicationId "97bdeda3-63b1-480c-a013-3431aed2667a" -RoleDefinitionName "Monitoring Reader" -Scope "/"
Scope Options
/→ Tenant-wide (Default)/subscriptions/<subscription-id>→ Specific Subscription/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>→ Resource Group
Verify Assignment
To check if the role was assigned successfully, use:
Get-AzRoleAssignment -ApplicationId "97bdeda3-63b1-480c-a013-3431aed2667a" | Where-Object {$_.RoleDefinitionName -eq "Monitoring Reader"}
Continue reading: