https://www.modernsecurity.nl/monitoring-admin-roles-in-loganalytics/