External access to Azure Connection Monitor Data

Damen Barker 40 Reputation points
2026-02-09T16:15:09.3933333+00:00

I currently have Azure Connection Monitor running and working as expected.

What I would like to do is to provide helpdesk personnel access to the graphs and data but without them having login access to the Azure.

So my question is, can a 3rd party monitoring product connect to Azure and extract the data from the Azure Connection Monitor. If possible, what steps are needed?

Thanks

Azure Network Watcher
Azure Network Watcher

An Azure service that is used to monitor, diagnose, and gain insights into network performance and health.


2 answers

Sort by: Oldest
  1. AI answer

    2026-02-09T16:15:20.0333333+00:00

    Yes, it is possible for a third-party monitoring product to connect to Azure and extract data from Azure Connection Monitor. You can achieve this by using the Azure Monitor REST API to access the metrics and logs generated by the Connection Monitor.

    Here are the general steps you would need to follow:

    1. Set Up Azure Monitor API Access: Ensure that the third-party monitoring tool can authenticate with Azure. This typically involves registering the application in Azure Active Directory and obtaining the necessary permissions to access Azure Monitor data.
    2. Use the REST API: Utilize the Azure Monitor REST API to extract metric data. You can refer to the API documentation for details on how to query metrics and logs. The API supports filter expressions to refine the data retrieved.
    3. Data Extraction: Implement the necessary API calls in your third-party monitoring tool to pull the desired data from Azure Connection Monitor. You may need to handle authentication tokens and API request formatting as specified in the Azure Monitor API documentation.
    4. Display Data: Once the data is extracted, you can format and display it in the third-party tool as needed for your helpdesk personnel.

    By following these steps, you can provide helpdesk personnel access to the graphs and data from Azure Connection Monitor without granting them direct login access to Azure.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Bharath Y P 10,610 Reputation points Microsoft External Staff Moderator
    2026-02-09T18:46:51.4233333+00:00

    Hello Damen Barker, We understand that you currently have Azure Connection Monitor collecting network connectivity and performance data successfully. You want helpdesk personnel to be able to view graphs and monitoring data, but without granting them Azure portal login access. You are asking whether a third-party monitoring product can retrieve this data and, if so, how to implement it.

    Azure Connection Monitor is only a data collection service. It does not expose a standalone API for third-party integrations. Instead, all measurements are written into Azure Monitor Logs tables inside a Log Analytics workspace. Microsoft designs integrations around Azure Monitor, making it the supported and secure integration layer for external tools.

    You can try the resolution below:

    Identify the Log Analytics workspace: Confirm which workspace your Connection Monitor is configured to send telemetry into.

    Create an Azure AD (Entra ID) App Registration: Register a new application in Azure AD. This app will act as the identity for your third‑party monitoring tool.

    Register an App to request authorization tokens and work with APIs - Azure Monitor | Microsoft Learn

    Generate a Client Secret: In the App Registration, create a client secret. This will be used by the external tool to authenticate securely.

    Overview - Azure Monitor | Microsoft Learn

    Assign Permissions: Grant the app either Log Analytics Reader or Monitoring Reader role. Scope the role assignment to the Log Analytics workspace or the resource group containing it. This ensures read‑only access to monitoring data.

    API access and authentication - Azure Monitor | Microsoft Learn

    Configure the Third‑Party Monitoring Product: Provide the required values to configure Query the Data: Use KQL queries against table to extract the Data

     You can refer the below reference documents for more details: Retrieve activity log data using Azure monitor REST API - Azure Monitor | Microsoft Learn

    Hope this helps! Let me know if you need more details or further assistance. Thanks

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.