tweak perms

This commit is contained in:
Meghan Stewart
2023-03-15 10:53:14 -07:00
parent 370c0385f2
commit acb6c21b95
2 changed files with 4 additions and 1 deletions

View File

@ -16,6 +16,8 @@ To enroll into Windows Update for Business reports, edit configuration settings,
- [Intune Administrator](/azure/active-directory/roles/permissions-reference#intune-administrator)
- [Windows Update deployment administrator](/azure/active-directory/roles/permissions-reference#windows-update-deployment-administrator)
- This role allows enrollment through the [workbook](../wufb-reports-enable.md#bkmk_enroll-workbook) but not the Microsoft 365 admin center
- [Policy and profile manager](/mem/intune/fundamentals/role-based-access-control#built-in-roles) Intune role
- This role allows enrollment through the [workbook](../wufb-reports-enable.md#bkmk_enroll-workbook) but does not allow any access to the Microsoft 365 admin center
To display the workbook and view the **Windows** tab in the **Software Updates** page [Microsoft 365 admin center](https://admin.microsoft.com) use the following role:
- [Global Reader role](/azure/active-directory/roles/permissions-reference#global-reader)

View File

@ -32,6 +32,7 @@ Before you begin the process of adding Windows Update for Business reports to yo
**Log Analytics permissions**:
The data for Windows Update for Business reports is routed to a Log Analytics workspaces for querying and analysis. To display or query data, users must have one of the following roles, or the equivalent permissions:
- [Log Analytics Contributor](/azure/role-based-access-control/built-in-roles#log-analytics-contributor) role can be used to edit and write queries
- [Log Analytics Reader](/azure/role-based-access-control/built-in-roles#log-analytics-reader) role can be used to read data