Choose an owned workspace before requiring protected Application Insights tables

Source facts

Application Insights automatically creates a managed Log Analytics workspace when deployment does not specify one. That workspace serves only the creating Application Insights resource: it cannot accept another instance, diagnostic settings or custom logs. Some settings, including quotas, remain adjustable, but the workspace cannot be repurposed. Its managed resource group’s deny assignment blocks protected-table configuration; Microsoft directs sensitive Application Insights data needing that protection to a workspace the customer owns. Microsoft Learn.

Applicability

Inspect the actual workspace association and managing resource rather than inferring ownership from its name. This decision concerns workspace-based resources and required table protection, not a new classic Application Insights deployment. Define whether the requirement is exclusive application storage, shared collection or protected tables before selecting the destination.

DSE recommendation

Resolve workspace ownership and protected-table requirements before designing additional collection around a managed workspace. If the requirements need an owned workspace, have the application and monitoring owners plan that association explicitly. Review the intended data access, networking and retention configuration for the destination. Do not respond to the documented restriction by attempting to remove service-managed protection or by repeatedly deploying unsupported data sources.

Verification

In a representative nonproduction deployment, inspect the linked workspace and verify that it has the ownership model the design requires. Test approved telemetry queries and the required table-protection configuration at the destination. Keep the original workspace until its data and removal obligations have been separately reviewed. Record evidence of the actual association and protection behavior; successfully changing a quota does not establish that the managed workspace supports other uses.

Official references

Microsoft Learn: Managed workspaces in Application Insights. Source reviewed September 9, 2026.