'Do we have a RBAC role that can let us view the Backend Health of an application gateway?

In Azure, we have multiple built-in roles for RBAC.

Do we have a RBAC role that can let us view the Backend Health of an application gateway?

This can be included to the set of views a reader has access to, but it is not so.



Solution 1:[1]

You can use Network Contributor to give permissions to read/write Application Gateways.

You can use the following actions to join backend address pool and view the backend health of Application Gateway.

Microsoft.Network/applicationGateways/backendAddressPools/join/action
Microsoft.ResourceHealth/availabilityStatuses/read

Reference: Application Gateway Backend Health-unable to view "does not have authorization to perform this action"?


Updated answer:

You can try az network application-gateway show-backend-health using Azure CLI:

az network application-gateway show-backend-health -g MyResourceGroup -n MyAppGateway --host-name-from-http-settings --path /test --timeout 100 --http-settings appGatewayBackendHttpSettings --address-pool appGatewayBackendPool

References: az network application-gateway show-backend-health, Troubleshoot backend health issues in Application Gateway and How to check the health of application gateway in Azure

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1