Examkin

Question

Difficulty: MediumAzure Monitor Alerts and Action Groups

You manage an Azure subscription. You assign the Contributor role to a Microsoft Entra ID group named Ops-Team.

You configure an Azure Monitor metric alert rule to monitor a virtual machine named VM-Prod1.

You create an action group named ActionGroup1 that uses the Email Azure Resource Manager Role action type, configured to send emails to the Contributor role. You associate ActionGroup1 with the metric alert rule.

When the metric alert triggers, members of Ops-Team do not receive the email notification.

You need to ensure that the members of Ops-Team receive the alert notifications.

What should you do?

  1. Configure ActionGroup1 to use the Email/SMS message/Push/Voice action type and specify the email addresses of the administrators.Answer
  2. B
    Configure ActionGroup1 to use the Email/SMS message/Push/Voice action type and select the Ops-Team group directly from the directory.
  3. C
    Assign the Contributor role to the Ops-Team group at the VM-Prod1 resource level instead of the subscription level.
  4. D
    Create an Azure Policy assignment to forward the alert notification to the members of the Ops-Team group.

Answer

Configure ActionGroup1 to use the Email/SMS message/Push/Voice action type and specify the email addresses of the administrators.
The correct option is to configure the action group to use the Email/SMS message/Push/Voice action type and specify the email addresses of the administrators. The Email Azure Resource Manager Role action type only sends emails to Microsoft Entra ID users who have direct role assignments at the subscription level. It does not resolve group memberships or send emails to Microsoft Entra ID groups. Therefore, manual email configuration (or utilizing a mail-enabled distribution group's email address) is required to ensure group members receive the notifications.

Step-by-Step Solution

1
Analyze the limitation of the Email Azure Resource Manager Role action type in Azure Monitor action groups.
The Email Azure Resource Manager Role action type only sends emails to direct user accounts assigned to the target role at the subscription level. It does not support group memberships, service principals, or resource-level assignments.
This explains why the members of the Ops-Team group did not receive notifications despite the group having the Contributor role.
2
Identify the appropriate action group configuration to notify the group members.
Use the Email/SMS message/Push/Voice action type, which allows entering explicit email addresses (such as individual addresses or a shared distribution list).
This bypasses the group-membership limitation of the Resource Manager role notification action.

Key Concept

Azure Monitor Action Groups support notifying roles or explicit email addresses, but role-based notification has strict limits regarding group inheritance and assignment scope.
Rate this question

Topics

Azure Monitor Alerts and Action Groups

More questions from this topic