Examkin

Soru

Zorluk: OrtaAzure Monitor Alerts and Action Groups

You manage an Azure subscription. You assign the Contributor role to a Microsoft Entra ID group named Ops-Team.

You configure an Azure Monitor metric alert rule to monitor a virtual machine named VM-Prod1.

You create an action group named ActionGroup1 that uses the Email Azure Resource Manager Role action type, configured to send emails to the Contributor role. You associate ActionGroup1 with the metric alert rule.

When the metric alert triggers, members of Ops-Team do not receive the email notification.

You need to ensure that the members of Ops-Team receive the alert notifications.

What should you do?

  1. Configure ActionGroup1 to use the Email/SMS message/Push/Voice action type and specify the email addresses of the administrators.Cevap
  2. B
    Configure ActionGroup1 to use the Email/SMS message/Push/Voice action type and select the Ops-Team group directly from the directory.
  3. C
    Assign the Contributor role to the Ops-Team group at the VM-Prod1 resource level instead of the subscription level.
  4. D
    Create an Azure Policy assignment to forward the alert notification to the members of the Ops-Team group.

Cevap

Configure ActionGroup1 to use the Email/SMS message/Push/Voice action type and specify the email addresses of the administrators.
The correct option is to configure the action group to use the Email/SMS message/Push/Voice action type and specify the email addresses of the administrators. The Email Azure Resource Manager Role action type only sends emails to Microsoft Entra ID users who have direct role assignments at the subscription level. It does not resolve group memberships or send emails to Microsoft Entra ID groups. Therefore, manual email configuration (or utilizing a mail-enabled distribution group's email address) is required to ensure group members receive the notifications.

Adım Adım Çözüm

1
Analyze the limitation of the Email Azure Resource Manager Role action type in Azure Monitor action groups.
The Email Azure Resource Manager Role action type only sends emails to direct user accounts assigned to the target role at the subscription level. It does not support group memberships, service principals, or resource-level assignments.
This explains why the members of the Ops-Team group did not receive notifications despite the group having the Contributor role.
2
Identify the appropriate action group configuration to notify the group members.
Use the Email/SMS message/Push/Voice action type, which allows entering explicit email addresses (such as individual addresses or a shared distribution list).
This bypasses the group-membership limitation of the Resource Manager role notification action.

Anahtar Kavram

Azure Monitor Action Groups support notifying roles or explicit email addresses, but role-based notification has strict limits regarding group inheritance and assignment scope.
Bu soruyu puanla

Konular

Azure Monitor Alerts and Action Groups

Bu konudan daha fazla soru