Custom RBAC Role cannot view pipeline executions under Monitor tab in Azure Data Factory Studio

Question

Custom RBAC Role cannot view pipeline executions under Monitor tab in Azure Data Factory Studio

Joel Rueda Gonzalez 25

Hi team,

We created a custom Azure RBAC role to allow users to trigger and monitor pipeline executions in Azure Data Factory. However, users assigned to this role are unable to view any pipeline execution history under the Monitor > Pipeline runs tab in Data Factory Studio.

Here is the list of actions currently included in the custom role definition:

User's image

Additional Details:

Role Scope: Assigned at the Resource Group level.

Behavior: The Monitoring tab UI fails to load/render past and active pipeline runs for users with this custom role (working fine for Data Factory Contributors).

Could you please advise if there are any missing ARM actions, resource providers, or UI-dependent permissions required for ADF Studio to properly display pipeline runs? Thanks in advance!

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Hello @Joel Rueda Gonzalez

Your custom role already includes most of the data-plane permissions required to query pipeline and activity runs. If users can trigger pipelines but Monitor > Pipeline runs doesn't render, the issue is often related to additional ARM read permissions that Azure Data Factory Studio depends on rather than the pipeline run APIs themselves.

A few things I'd recommend checking:

Compare your custom role with the built-in Data Factory Contributor role to identify any missing */read permissions that the Studio UI relies on. The built-in role contains several read actions beyond pipeline execution APIs.
Ensure the role includes read access for child resources that the monitoring experience queries, such as factory-level metadata and monitoring resources.
Use your browser's Developer Tools (F12) > Network tab while opening Monitor > Pipeline runs. Look for any requests returning 403 Forbidden or 401 Unauthorized. The failed request usually identifies the exact missing ARM action.
Verify that no Deny Assignments, Azure Policy, or Conditional Access policies are preventing access, even if the RBAC role appears correct.

Could you also confirm:

Does the page show "Access denied", remain blank, or fail with another error?
Are there any 403 responses in the browser's Network tab? If so, which REST endpoint is returning the error?

That information will help determine whether this is a missing RBAC permission or a UI dependency within Azure Data Factory Studio.

Please "Accept the Answer" if this information helped you. This will help us and others in the community as well.

Joel Rueda Gonzalez 25 Reputation points

2026-08-07T01:19:56.18+00:00

Hello @Allan Solomon Mejia

Thank you very much for your response.

First of all, my apologies. I just realized that the scope was assigned at the Data Factory V2 level rather than at the Resource Group (RG) level. The original request submitted to our internal IAM team was to assign the permissions at the RG level.

Based on this, I understand that the issue is most likely related to the ARM layer, so I will request that the assignment be updated accordingly.

Also, to answer one of your questions, we are not receiving any "Access Denied" or "403" errors. The list of pipelines in the Monitor section simply appears blank.

Thank you again for your support. If you notice anything else that I should communicate to the IAM team, I would greatly appreciate it.

Best regards,

Joel.