We’re expanding Azure Monitor across several subscriptions and deciding how to organize Log Analytics workspaces. A shared workspace would make cross-environment searches easier, but our production and development teams have different access needs and retention expectations.

For teams that have made this choice, what became difficult later: permissions, noisy queries, retention costs, or keeping dashboards consistent? I’d especially like to hear whether separating production data is worth the extra workspace administration.