Skip to main content

Requirements

To discover Application Gateways and query their metrics, it is recommended to use a Service Principal with read permissions.
The plugin requires read permissions to:
  • List Microsoft.Network/applicationGateways resources.
  • Read the basic Application Gateway configuration, including SKU and resource group.
  • Query Azure Monitor metrics associated with the resource.

In most environments, the Reader role over the subscription or over the resource group is enough. If permissions are limited to a single resource group, it is recommended to also configure the Resource group field in the Discovery task.