-
Action Group Email notification question
-
Your organization Azure subscription contains the following identities:
Name Type Member of
TDU1 User TDGrp1
TDU2 User TDGrp1
TDU3 User None
TDSP1 Managed Identity TDGrp1
TDSP2 Managed Identity NoneYou created an alert rule and configured an action group with the notification type Email Azure Resource Manager Role, which sends an email to the Monitoring Reader role.
The Monitoring Reader role is assigned to the user, service principal and group.
Which of the following identities will receive an email notification?
In the explanation of the correct answer, it says “Microsoft Entra groups and service principals are not emailed.”. However, that does not appear to be correct.
This link: https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/action-groups#email-azure-resource-manager , which is also provided in the explanation, says:> When you use Azure Resource Manager for email notifications, you can send email to the members of a subscription’s role. Email is sent to Microsoft Entra ID user or group members of the role. This includes support for roles assigned through Azure Lighthouse.
> Action Groups only support emailing the following roles: Owner, Contributor, Reader, Monitoring Contributor, Monitoring Reader.
Explanatory text also says:
> All of the other options are incorrect because only TDU3 will able to receive the email notification since emails are only sent to Microsoft Entra ID user members who are members of the role.
I am trying everything to make sense of this – the only thing I can think of is that the question assumes that because TDU1 and TDU2 are members of TDGrp1, they are not directly members of the Monitoring Reader Role. This seems to contradict the portion of the question that says “The Monitoring Reader role is assigned to the user, service principal and group.”.
Please explain the answer to this question. BTW, I put the question into ChatGPT and it says all the users should receive the email.
Log in to reply.