Examkin

Question

Difficulty: MediumAzure Monitor Alerts and Action Groups

You have an Azure subscription named Sub1 that contains a resource group named RG1.

You configure the following user role assignments in Sub1:
- User1 is assigned the Contributor role for Sub1.
- User2 is assigned the Contributor role for RG1 only.

You create an Azure Monitor action group named ActionGroup1 in RG1. You add an action to ActionGroup1 that uses the Email Azure Resource Manager Role configuration to notify the Contributor role.

You configure a metric alert rule for a virtual machine in RG1 and associate the rule with ActionGroup1.

When the metric alert triggers, which of the users will receive the email notification?

  1. A
    Both User1 and User2
  2. Only User1Answer
  3. C
    Only User2
  4. D
    Neither User1 nor User2

Answer

Only User1
The Email Azure Resource Manager Role action in Azure Monitor action groups only sends emails to users who are assigned the selected role at the subscription scope. Since User1 has the Contributor role assigned for the entire subscription (Sub1), User1 will receive the email notification. User2's assignment is restricted to the resource group (RG1) scope and is not evaluated by this action, so User2 will not be notified.

Step-by-Step Solution

1
Identify the scope requirements for the 'Email Azure Resource Manager Role' feature in Azure Monitor action groups.
The feature specifically requires that the selected Azure RBAC role (such as Contributor) must be assigned at the subscription scope.
Understanding this limitation is necessary to determine which users are eligible to receive emails through this action group configuration.
2
Analyze the role assignments for the two users relative to the subscription scope.
User1 is assigned the Contributor role at the subscription level (Sub1), while User2 is assigned the Contributor role at the resource group level (RG1).
This distinguishes which user's assignment meets the subscription-level scope requirement.
3
Determine which user will be notified based on their assignment scope.
Only User1 meets the criteria of holding the Contributor role at the subscription level, while User2 is excluded because their assignment is at the resource group level.
To identify the correct final list of recipients for the alert email.

Key Concept

Azure Monitor Action Groups support notifying users based on subscription-level Azure Resource Manager (ARM) roles. When using the 'Email Azure Resource Manager Role' action, emails are only sent to users who have the specified role explicitly assigned at the subscription scope. Inherited assignments or assignments made at the resource group or resource level are not evaluated.
Rate this question

Topics

Azure Monitor Alerts and Action Groups

More questions from this topic