Anyone please help me on understanding this question AZ104

[Sungpill Han]

I kept reading the question and solution, cant understand how TD3 user gets the alert.

Did Tutorial Dojo forgot to give more information on the questions?

“The Monitoring Reader role is assigned to the user, service principal and group.”

How does it evaluated the TD3 user is assigned the rMonitoring Reader role?

Question:

Your organization Azure subscription contains the following identities:

You created an alert rule and configured an action group with the notification type Email Azure Resource Manager Role, which sends an email to the Monitoring Reader role.

The Monitoring Reader role is assigned to the user, service principal and group.

Which of the following identities will receive an email notification?

[Lois-TutorialsDojo]

Hello Sungpill,

Thanks for bringing this up, that’s a really good point. Looking at the table alone, it’s not obvious that TDU3 has the Monitoring Reader role, so your confusion makes sense. The statement you flagged means that one user, one service principal, and one group each have the role assigned directly. In this case, the user is TDU3, the service principal/managed identity is TDSP2, and the group is TDGrp1. TDU1 and TDU2 only get the role through the group, not directly. Since email notifications go only to users with direct role assignments (not via groups or service principals), only TDU3 will get the alert.

We appreciate you pointing this out. Our team has already flagged this question, and we’ll update it in our next content review cycle to make the scenario clearer and better reflect both exam context and practical best practices.

Regards,

Lois @ Tutorials Dojo

[Sungpill Han]

Lois,

You said the question stated “The statement you flagged means that one user, one service principal, and one group each have the role assigned directly” which is not.

Instead, The question stated, “The Monitoring Reader role is assigned to the user, service principal and group.”

How can you guess ‘the user’ is TD3?

Also, role assignment can be done to users, groups and the notification type of Alert is ” Email Azure Resource Manager Role. So the email goes to any user or group who has Monitoring Reader role.