Administration

Administration

🇪🇸 Español

The Administration section (/en/admin/, /es/admin/) is available to Goliat administrators signed in with Microsoft Entra ID. Demo mode has no Administration. See Authentication and Roles to grant access.

You can try a simulated version with fictional data in the website demo.

What it shows

• Azure Function: state, region, runtime, memory and instance limit, with execution, memory and CPU charts.
• Inventory schedule: enable or pause the timer, daily at a UTC time or every 1, 2, 3, 4, 6, 8 or 12 hours.
• Inventory status: date of the imported inventory, views, errors and the last generation requested over HTTP. A warning appears when the published blob differs from the imported snapshot.
• Monitored tags: search, select tag keys or use automatic detection.
• PostgreSQL: connection check, database, server, version, TLS, size, imported views and rows, plus CPU/memory, connections and disk charts.
• Blob Storage: file accessibility, container, path, endpoint, size, tier, encryption and last modification, plus requests, traffic and latency charts.

Charts use hourly samples over 1, 6, 12, 24 or 48 hours, or 7 days (UTC). Counters and traffic are summed; percentages, connections, disk and latency are averaged. Missing samples are shown as gaps, never as zero.

Query Azure re-reads metrics, configuration, PostgreSQL and blob properties. It does not generate an inventory; use Refresh in the dashboard for that.

Permissions

The web identity receives two custom roles with minimal permissions: one limited to managing the collector Function, and Goliat Data Metrics Reader (Microsoft.Insights/metrics/read only) on PostgreSQL and Storage. It cannot change configuration or read data in those resources. Passwords, connection users, connection strings and tokens are never returned.

Notes

• Metrics come from Azure Monitor and may be delayed. Executions include HTTP calls, status checks and the timer; they are not the number of generated inventories.
• PostgreSQL metrics cover the whole server; Blob metrics cover all containers in the account.
• To keep schedule changes when redeploying infrastructure, update inventory.schedule and inventory.disableTimer in the private project file.
• With external PostgreSQL, leave AZURE_POSTGRES_RESOURCE_ID empty: SQL details keep working without the Azure charts.

Full reference: docs/administration.md.