Grant permission to the Event Grid to write to the storage queue

Give the Event Grid a role on your Microsoft Azure storage account that allows it to deliver lifecycle event messages.

Note: In the Controlled Availability release stage, Splunk products may have limitations on customer access, features, maturity, and regional availability. For additional information on Controlled Availability please contact your Splunk representative.

The Event Grid must have the Storage Queue Data Message Sender role on the storage account. Without this role, the Event Grid fails to deliver blob lifecycle event messages. For more information about role assignment in Microsoft Azure, see the Azure RBAC documentation: Assign Azure roles using the Azure portal

Note: This is task 4 of 5 tasks that you must complete to ensure that the Splunk-native data catalog that backs your Microsoft Azure dataset stays in sync with that dataset as it changes over time. See Ensure the Microsoft Azure dataset and its data catalog stay in sync.
  1. In the Azure portal, go to the Storage accounts page and open the details for your storage account.
  2. In the left menu, select Access Control (IAM).
  3. Select + Add and then select Add role assignment.
  4. On the Add role assignment page, search for the Storage Queue Data Message Sender role, then select Next.
  5. Under Assign access to, select User, group, or service principal, then choose Select members.
  6. In the Select members dialog box, search for Microsoft.EventGrid.
  7. Select the Microsoft.EventGrid service principal from the results.
  8. Choose Select, then select Review + assign.
  9. Review the settings and select Review + assign again to confirm.
Go to the final step: Grant a storage queue role to the app registration.