When I try to open the Monitoring & health Log Analytics section I get an error

Ludwig Wurmannstätter 20

I'm in the Entra Admin Center - Identity - Monitoring & health and click on Log Analytics and/or Workbooks and get this Error message:

Insufficient permissions

In order for you to be able to leverage Log Analytics or Workbooks you first need to get permission for one of the following workspaces: /subscriptions/cc02cae4-0e4d-46a5-b335-4076320570b1/resourcegroups/aip-log-analytics-rg/providers/microsoft.operationalinsights/workspaces/aip-log-analytics-instance, /subscriptions/cc02cae4-0e4d-46a5-b335-4076320570b1/resourcegroups/ca-log-analytics-instance_rg/providers/microsoft.operationalinsights/workspaces/ca-log-analytics-instance.

I already know from an earlier support request (Support request ID: 2411120050005221) that the mentioned Subscription was deleted a few years ago, very likely with all the the objects, like the workbooks and Log analytics workspaces.

I can create new Log Analytics workspaces and Azure Workbooks in the Microsoft Azure Portal. Only Entra admin center show the error.

Additionally I tried to create a new Resource group with the above mentioned name and a Log analytics workspace / Azure workbook with the same names - both worked. Which is OK, because they were created in a different and my one and only Subscription.

Solution I see:

a; Delete the old and deleted Subscription with all its Objects from my Tenant

b; Show me how to convince Entra to use another Log analytics workspace / Azure Workbook and forget the one in the error message

Rahul Podila 595 Reputation points Microsoft Vendor

2024-12-02T06:23:34.48+00:00

Hi @Ludwig Wurmannstätter

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

The error occurs because the Entra Admin Center is still searching for a subscription workspace that no longer exists. Even though the subscriptions were canceled a few years ago, some programs still remain, contributing to the problem.

First, we need to check if the old deleted subscriptions still exist in Azure Active Directory. If so, it may need to be removed altogether. You may need to contact Azure Support to have it completely resolved from the system, just to make sure it doesn’t cause any more problems.

Now, since you can create a new Log Analytics workspace, all we need to do is make sure the Entra Admin Center points to the new workspace instead of the old one. Navigate to another workspace in the Azure Portal, and verify that the appropriate permissions are in place (such as Reader or Assistant). This allows the Entra Admin Center to login without any problems.

Sometimes, Entra can get “stuck” in an old factory because of hidden configuration. To prevent this, log out of the Entra Admin Center and try to log back in. You can also try using the Incognito mode in your browser to clear any old data.

After completing these steps, the error should go away, and Entra Admin Center will start using the new workspace without any issues.

If you have any further queries, do let us know

If the answer is helpful, please click "Accept Answer" and "Upvote it"
Ludwig Wurmannstätter 20 Reputation points

2024-12-02T15:15:39.3733333+00:00

Hi Rahul,

good to hear from you. I'm now in an InPrivate Session, just to make sure there is not something hidden.

I checked the access to the the Log Analytics workspace and I'm a Log Analytics Contributor - should be OK, or?

And I checked the access to the Azure Workbook, I'm an Workbook Contributor. OK / enough?

The Workspace and the Workbook are Linked.

But the Error is still there. Even in an Windows Sandbox Environment, to eliminate my own PC as an error condition and after waiting for more than 4 hours after I added myself as an Workbook Contributor :-(

I had a support request opened with Microsoft Subscription Support - Request ID: 2411120050005221. The guy told me he can see the mentioned Subscription in my Tenant as Deleted. He told me to get this one completely deleted I need to open another case with the Azure / Entra Team, but to do so I need to go for an Azure Support Plan, which is 100$. My view is, this error is a wrong configuration in the Microsoft System which can't be solved by myself. As everything is working as expected in Azure. I'm an Microsoft AI Partner myself, I really can't understand why I should pay for that.

Greetings, Ludwig
Rahul Podila 595 Reputation points Microsoft Vendor

2024-12-04T02:21:50.18+00:00

Hi @Ludwig Wurmannstätter,

Thanks for the update, and I completely understand your frustration with this issue.

To prevent this, we need to ensure that old subscriptions are completely removed from the system. It may still have pending references to be resolved. Unfortunately, this will likely require help from Azure support, as the remaining content of the deleted subscription can be removed. You will need to contact them and, to make matters worse, you will need an Azure support system, which costs $100.

In the meantime, the new Log Analytics workspace and Azure Workbook you created should continue to work without issue. You can continue using it while waiting for the system to clean up. You’ve already made sure you have the correct permissions (Log Analytics Contributor and Workbook Contributor), so that’s not a problem. The only problem is that the system still contains the old subscription information.

In summary, make sure old subscriptions are completely removed, contact Azure support (which may require a $100 support plan), and use your new workspace and workbooks while you wait for the issue to be resolved I understand it's frustrating, but using Azure Support to help resolve the issue can.

If you have any further queries, do let us know

If the answer is helpful, please click "Accept Answer" and "Upvote it"

Share via

When I try to open the Monitoring & health Log Analytics section I get an error

Your answer