Policy DisplayName |
Policy Id |
Category |
Effect |
Roles# |
Roles |
State |
Enable logging by category group for Apache Spark pools (microsoft.synapse/workspaces/bigdatapools) to Log Analytics |
29565b0a-e1b5-49c1-94bf-b8b258656460 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for API Management services (microsoft.apimanagement/service) to Log Analytics |
567c93f7-3661-494f-a30f-0a94d9bfebf8 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for App Configuration (microsoft.appconfiguration/configurationstores) to Log Analytics |
4b05de63-3ad2-4f6d-b421-da21f1328f3b |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for App Service Environments (microsoft.web/hostingenvironments) to Log Analytics |
9dc3e252-1cff-4ae5-bcad-5a92b7167d43 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Attestation providers (microsoft.attestation/attestationproviders) to Log Analytics |
856331d3-0169-4dd9-9b04-cbb2ad3d1cf2 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Automation Accounts (microsoft.automation/automationaccounts) to Log Analytics |
b797045a-b3cd-46e4-adc4-bbadb3381d78 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for AVS Private clouds (microsoft.avs/privateclouds) to Log Analytics |
69ab8bfc-dc5b-443d-93a7-7531551dec66 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure AD Domain Services (microsoft.aad/domainservices) to Log Analytics |
1bd91eae-4429-4f23-b780-8c9622e023e3 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure Cache for Redis (microsoft.cache/redis) to Log Analytics |
aec4c33f-2f2a-4fd3-91cd-24a939513c60 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure Cosmos DB accounts (microsoft.documentdb/databaseaccounts) to Log Analytics |
68ba9fc9-71b9-4e6f-9cf5-ecc07722324c |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure Data Explorer Clusters (microsoft.kusto/clusters) to Log Analytics |
a819f227-229d-44cb-8ad6-25becdb4451f |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure FarmBeats (microsoft.agfoodplatform/farmbeats) to Log Analytics |
f969646f-b6b8-45a0-b736-bf9b4bb933dc |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure Load Testing (microsoft.loadtestservice/loadtests) to Log Analytics |
75a112bc-759f-4f29-83cc-799019db39c3 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure Machine Learning (microsoft.machinelearningservices/workspaces) to Log Analytics |
90c90eda-bfe7-4c67-bf26-410420ed1047 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure Managed Grafana (microsoft.dashboard/grafana) to Log Analytics |
d98f63ed-e319-4dc3-898f-600953a05f7e |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Azure Synapse Analytics (microsoft.synapse/workspaces) to Log Analytics |
305408ed-dd5a-43b9-80c1-9eea87a176bb |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Bastions (microsoft.network/bastionhosts) to Log Analytics |
f8352124-56fa-4f94-9441-425109cdc14b |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Batch accounts (microsoft.batch/batchaccounts) to Log Analytics |
9fcae8ed-246a-407b-8f75-f3500ff2c9db |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Caches (microsoft.cache/redisenterprise/databases) to Log Analytics |
fa570aa1-acca-4eea-8e5a-233cf2c5e4c2 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Chaos Experiments (microsoft.chaos/experiments) to Log Analytics |
39078c44-b8d4-4c7d-8579-7f021d326ebf |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Code Signing Accounts (microsoft.codesigning/codesigningaccounts) to Log Analytics |
958060c2-8d8e-478e-b3ec-d3d2249b461c |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Cognitive Services (microsoft.cognitiveservices/accounts) to Log Analytics |
55d1f543-d1b0-4811-9663-d6d0dbc6326d |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Container Apps Environments (microsoft.app/managedenvironments) to Log Analytics |
6a664864-e2b5-413e-b930-f11caa132f16 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Container registries (microsoft.containerregistry/registries) to Log Analytics |
56288eb2-4350-461d-9ece-2bb242269dce |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Dedicated SQL pools (microsoft.synapse/workspaces/sqlpools) to Log Analytics |
a271e156-b295-4537-b01d-09675d9e7851 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Dev centers (microsoft.devcenter/devcenters) to Log Analytics |
82b076b9-2062-4516-ae4c-37b1890eabb2 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Event Grid Domains (microsoft.eventgrid/domains) to Log Analytics |
b90ec596-faa6-4c61-9515-34085703e260 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Event Grid Partner Namespaces (microsoft.eventgrid/partnernamespaces) to Log Analytics |
3496f6fd-57ba-485c-8a14-183c4493b781 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Event Grid Topics (microsoft.eventgrid/topics) to Log Analytics |
46b2dd5d-3936-4347-8908-b298ea4466d3 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Event Hubs Namespaces (microsoft.eventhub/namespaces) to Log Analytics |
441af8bf-7c88-4efc-bd24-b7be28d4acce |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Front Door and CDN profiles (microsoft.cdn/profiles) to Log Analytics |
6201aeb7-2b5c-4671-8ab4-5d3ba4d77f3b |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Front Door and CDN profiles (microsoft.network/frontdoors) to Log Analytics |
e9c56c41-d453-4a80-af93-2331afeb3d82 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for IoT Hub (microsoft.devices/iothubs) to Log Analytics |
614d9fbd-68cd-4832-96db-3362069661b2 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Key vaults (microsoft.keyvault/vaults) to Log Analytics |
6b359d8f-f88d-4052-aa7c-32015963ecc1 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Live events (microsoft.media/mediaservices/liveevents) to Log Analytics |
5d487647-6a53-4839-8eb8-edccf5e6bf1d |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Log Analytics workspaces (microsoft.operationalinsights/workspaces) to Log Analytics |
818719e5-1338-4776-9a9d-3c31e4df5986 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Managed CCF Apps (microsoft.confidentialledger/managedccfs) to Log Analytics |
b6f29e6b-4b21-4bb6-a997-38592fa02864 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Managed HSMs (microsoft.keyvault/managedhsms) to Log Analytics |
b88bfd90-4da5-43eb-936f-ae1481924291 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Media Services (microsoft.media/mediaservices) to Log Analytics |
69214fad-6742-49a9-8f71-ee9d269364ab |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Microsoft Purview accounts (microsoft.purview/accounts) to Log Analytics |
4cabf9fc-4ed1-4990-bbaf-7248fb8751bc |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.azuresphere/catalogs to Log Analytics |
bbf47f27-95e4-46a0-82e1-898ce046d857 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.community/communitytrainings to Log Analytics |
0509e2d8-d657-4563-a7c8-b88b9180a6e8 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.dbformysql/flexibleservers to Log Analytics |
7860f3fe-0db3-42d4-bf3d-7042ea5e5787 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.dbforpostgresql/flexibleservers to Log Analytics |
5fbd326d-328c-414e-a922-2d6963998962 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.documentdb/cassandraclusters to Log Analytics |
ae0fc3d3-c9ce-43e8-923a-a143db56d81e |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.documentdb/mongoclusters to Log Analytics |
064a3695-3197-4354-816b-65c7b952db9e |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.machinelearningservices/registries to Log Analytics |
33835ef6-bc67-4bde-bf5f-5a857f195a57 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.network/networkmanagers/ipampools to Log Analytics |
6ee1c58c-a123-4cd6-8643-48b2f7ffb3e1 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.network/p2svpngateways to Log Analytics |
cac9e1c5-c3cb-47fa-8d4c-88b8559262d2 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.networkanalytics/dataproducts to Log Analytics |
0e861bb0-d926-4cdb-b2d6-d59336b8f5b3 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.notificationhubs/namespaces/notificationhubs to Log Analytics |
54c7cff6-a032-43e1-9656-d4c24665f805 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.synapse/workspaces/kustopools to Log Analytics |
887dc342-c6bd-418b-9407-ab0e27deba36 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for microsoft.workloads/sapvirtualinstances to Log Analytics |
1568dd08-cca0-4073-bfd8-e08a7fdc543e |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Network Managers (microsoft.network/networkmanagers) to Log Analytics |
23673f24-2594-43e9-9983-60a0be21bd76 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Notification Hub Namespaces (microsoft.notificationhubs/namespaces) to Log Analytics |
69e0da8f-ca50-479d-b1a8-33a31426c512 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Playwright Testing (microsoft.azureplaywrightservice/accounts) to Log Analytics |
81039988-1f84-4aa6-8039-0a64c2a301b4 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Public IP addresses (microsoft.network/publicipaddresses) to Log Analytics |
1513498c-3091-461a-b321-e9b433218d28 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Public IP Prefixes (microsoft.network/publicipprefixes) to Log Analytics |
b55f2e8e-dc76-4262-a0e3-45f02200ff0e |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for SCOPE pools (microsoft.synapse/workspaces/scopepools) to Log Analytics |
f018b68f-d953-4238-81a3-94a0f39507e3 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Search services (microsoft.search/searchservices) to Log Analytics |
8def4bdd-4362-4ed6-a26f-7bf8f2c58839 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Service Bus Namespaces (microsoft.servicebus/namespaces) to Log Analytics |
0277b2d5-6e6f-4d97-9929-a5c4eab56fd7 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for SignalR (microsoft.signalrservice/signalr) to Log Analytics |
93a604fe-0ec2-4a99-ab8c-7ef08f05555a |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for SQL databases (microsoft.sql/servers/databases) to Log Analytics |
6567d3f3-42d0-4cfb-9606-9741ba60fa07 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for SQL managed instances (microsoft.sql/managedinstances) to Log Analytics |
8fc4ca5f-6abc-4b30-9565-0bd91ac49420 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Streaming Endpoints (microsoft.media/mediaservices/streamingendpoints) to Log Analytics |
be26ca28-761d-4538-b78a-975eb47c680c |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Video Analyzers (microsoft.media/videoanalyzers) to Log Analytics |
34c7546c-d637-4b5d-96ab-93fb6ed07af8 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Virtual network gateways (microsoft.network/virtualnetworkgateways) to Log Analytics |
ed6ae75a-828f-4fea-88fd-dead1145f1dd |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Volumes (microsoft.netapp/netappaccounts/capacitypools/volumes) to Log Analytics |
c3b912c2-7f5b-47ac-bd52-8c85a7667961 |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |
Enable logging by category group for Web PubSub Service (microsoft.signalrservice/webpubsub) to Log Analytics |
0da6faeb-d6c6-4f6e-9f49-06277493270b |
Monitoring |
Default DeployIfNotExists Allowed DeployIfNotExists, AuditIfNotExists, Disabled |
1 |
Log Analytics Contributor |
GA |