You are managing access to log data, which is stored in a Log Analytics workspace in Azure monitor. The workspace contains data and configuration information. One of your users is assigned a Log Analytics contributor role. The user is not able to configure their resources to send logs to the workspace. You need to help the user to ensure that he can do so.You verified that the workspace access control mode is already configured to use workspace or resource permissions. 
You need to ensure that the user is provided with only the minimum privileges to accomplish the task. 
Which of these permissions you need to grant? Choose two.

Answer options:

A.Microsoft.Insights/diagnosticSettings/write
B.Microsoft.OperationalInsights/workspaces/sharedKeys/action
C.Microsoft.OperationalInsights/workspaces/read
D.Microsoft.OperationalInsights/workspaces/write

Answer: B & C 

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access