canonical: https://jentic.com/apis/azure.com/applicationinsightsmanagementclient

# Microsoft Azure ApplicationInsightsManagementClient

ApplicationInsightsManagementClient is the Azure Resource Manager surface for the Application Insights web-test alerting feature. It exposes the metadata operation that Azure Portal and tooling use to enumerate the supported Microsoft.Insights provider operations for application performance monitoring resources. This is a control-plane companion to the broader Azure Monitor Application Insights stack, focused specifically on web-test based availability alerts.

## For AI agents

List the available Microsoft.Insights provider operations exposed by the Application Insights web-test management client so an agent can discover what actions are permitted on the alerting resource type.

## Scope

Does not query telemetry, manage alert rules, or create web-tests - use for listing the Microsoft.Insights provider operation catalogue only.

## Capabilities

- Enumerate the Microsoft.Insights provider operations that govern Application Insights web-test alerting
- Discover supported resource provider actions before invoking other Azure Monitor or Application Insights APIs
- Surface available control-plane permissions for role assignment validation against Application Insights resources
- Audit the operation catalogue advertised by the Application Insights management resource provider
- Bootstrap tooling that needs the canonical list of permitted Application Insights operations

## Use cases

### RBAC Operation Discovery for Application Insights

Cloud governance teams building custom Azure role definitions need the exact list of operations Application Insights publishes under the Microsoft.Insights provider. Calling the operations endpoint returns the canonical action names that can be added to a role definition's actions or notActions array, removing guesswork when scoping permissions for web-test alerting.

Example prompt: Call GET /providers/Microsoft.Insights/operations with api-version=2015-05-01 and return the operation names so the user can paste them into a role definition.

### Tooling Bootstrap for Azure Monitor Integrations

Internal developer tools that wrap Azure Monitor and Application Insights need a stable list of supported operations to render permission UI or validate action strings. The single operations endpoint provides this catalogue without requiring a full ARM resource enumeration, keeping startup latency low for CLIs and dashboards that bind to Application Insights.

Example prompt: Fetch the operations list and cache it locally, mapping operation name to display name for use in a permission picker UI.

### Agent-Driven Compliance Audit

An AI agent auditing an Azure subscription for least-privilege compliance can call this API through Jentic to retrieve the authoritative operation list for Application Insights, then cross-reference it with assigned role definitions to flag over-permissioned principals. Jentic returns the operation schema and credential scope without the agent ever holding the bearer token.

Example prompt: Search Jentic for 'list Application Insights provider operations', execute the call with the user's scoped Azure token, and compare returned action names against role assignments in the target subscription.

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| GET | /providers/Microsoft.Insights/operations | List all Application Insights management operations for the Microsoft.Insights provider |

## Key resources

- **Operations** — Read-only metadata listing the Microsoft.Insights provider operations available for Application Insights web-test alerting

## Why Jentic

- **Setup:** Wiring the Application Insights Management Client by hand means registering an Azure AD app, acquiring and refreshing OAuth 2.0 bearer tokens for management.azure.com, and supplying the required api-version on the single operations call yourself. Through Jentic you install once, import the Application Insights Management Client from the API Directory, store the service principal credential once, and your agent calls it.
- **Permission scoping:** This client exposes one read-only call, GET /providers/Microsoft.Insights/operations, which lists the provider operation catalogue and takes no resource id in its path. Scoping is by operation, so you grant the agent this metadata read and nothing else, and it cannot mutate any Application Insights resource.
- **Credential handling:** Your Azure AD service principal credential is stored once, encrypted, by your own Jentic One instance and exchanged for a short-lived bearer token at execution time. The secret never enters the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'list Application Insights provider operations', and Jentic returns the operation with its input schema, including the required api-version, so the agent calls it without browsing the Azure Resource Manager reference.

## Related APIs

- **Application Insights Data Plane** — Query telemetry, events, and metrics from Application Insights workspaces directly
- **Monitor Management Client** — Manage Azure Monitor diagnostic settings, action groups, and metric alerts
- **Microsoft Insights** — Broader Microsoft.Insights surface for autoscale, activity logs, and metrics

## FAQ

### What authentication does the ApplicationInsightsManagementClient use?

It uses Azure Active Directory OAuth 2.0 bearer tokens against the https://management.azure.com/ resource. Through Jentic, the Azure token is held in the encrypted vault and a scoped session is supplied to the agent at call time, so the raw token never enters agent memory or logs.

### What endpoints does the ApplicationInsightsManagementClient expose?

This client exposes a single read-only endpoint, GET /providers/Microsoft.Insights/operations, which returns the catalogue of supported Microsoft.Insights provider operations for Application Insights web-test alerting at api-version 2015-05-01.

### What are the rate limits for the ApplicationInsightsManagementClient?

Calls are subject to Azure Resource Manager throttling, which applies per-subscription and per-tenant quotas measured in reads and writes per hour. The operations endpoint is a low-cost read and rarely hits the limit. Refer to the Azure Resource Manager throttling guidance for current values.

### How do I list Application Insights operations through Jentic?

Search Jentic with the query 'list Application Insights provider operations'. Jentic returns the operation schema for GET /providers/Microsoft.Insights/operations, you load it, and execute. The response is the canonical action list you can use for role definitions.

### Is the ApplicationInsightsManagementClient free?

The management API itself does not incur a charge for read calls against the operations endpoint. Application Insights data ingestion and retention are billed separately under the Azure Monitor pricing model.

### Can I create or modify web-tests with this API client?

No. This specific client (api-version 2015-05-01) only exposes the operations metadata endpoint. To create, update, or delete web-tests and alert rules, use the broader Application Insights and Azure Monitor management APIs that ship under separate slugs in the Azure catalogue.

### Can I limit what my agent is allowed to do with the Application Insights Management Client?

Yes. Because Jentic One is self-hosted, you decide which operations and credentials your agent may use, and this client exposes only one read-only call, GET /providers/Microsoft.Insights/operations, which lists the provider operation catalogue and takes no resource id. You grant your agent that single metadata read and nothing else, so it can enumerate the supported Microsoft.Insights operations but cannot create, update, or delete any Application Insights web-test or alert resource. Your Azure service principal credential stays with your own instance and is exchanged for a short-lived token only at call time.
