Creating alerts for our azure recovery vault, unable to create a resource group

Padraig Foley 0 Reputation points
2023-05-02T10:11:53.8633333+00:00

When trying to create a new resource group and set up alerts on Azure, I am getting an error saying I do not have permission.

I am the global admin for this so I am confused as to why I am having issues.

Also, when trying to add an entry for backup reports I get the following.

User's image

Azure Backup
Azure Backup
An Azure backup service that provides built-in management at scale.
1,114 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. SwathiDhanwada-MSFT 17,161 Reputation points
    2023-05-03T05:30:27.39+00:00

    @Padraig Foley As mentioned by community member, its not recommended to create any resources in resource group created by backup.

    As a Global administrator, you can manage all aspects of Azure AD and Microsoft services that use Azure AD identities. But you will not be able to create or update resources.

    To create a resource group, you need to have at least the "Contributor" role on the subscription or resource group level. This role allows you to create and manage all types of Azure resources within the resource group. You can also be assigned a custom role that includes the "Microsoft.Resources/subscriptions/resourceGroups/write" permission. This permission allows you to create resource groups.

    1 person found this answer helpful.
    0 comments
  2. Tech-Hyd-1989 5,741 Reputation points
    2023-05-02T10:26:30.3233333+00:00

    Hello Padraig Foley

    Good Day!

    AzureBackupRG_westeurope_1 is a resource group created by azure backup to maintain restore point collection sets for instant restore capability. Don't use this RG for reports or any other resource creations.

    The Backup service creates this separate resource group (RG), different than the resource group of the VM to store the restore point collection (RPC). The RPC houses the instant recovery points of managed VMs. The default naming format of the resource group created by the Backup service is: AzureBackupRG_<Geo>_<number>. For example: AzureBackupRG_northeurope_1.

    I recommend you to create a separate resource group for reports related workbooks or use any other existing resource group other than AzureBackupRG_westeurope_1.

    Reference: https://learn.microsoft.com/en-us/azure/backup/backup-during-vm-creation#azure-backup-resource-group-for-virtual-machines

    Please accept answer and upvote if the above information is helpful for the benefit of the community.