Cannot Get Action Group -> Email Azure Resource Manager Role to send notifications to Monitoring Readers

Question

Cannot Get Action Group -> Email Azure Resource Manager Role to send notifications to Monitoring Readers

Greg H 35

I have a notification action group setup that has a single notification type to Email Azure Resource Manager Role -> Monitoring Readers.
In the subscription IAM tab I have 3 users in the Monitoring Roles Group. All of these users are active directory users with email addresses.
When I test this action group no emails are sent out.

Any idea on what would cause this behavior? The functionality seems to work if I switch the group to Contributors.

0 comments

1 answer

Your answer

Answer 1

Silvia Wibowo 6,071 Microsoft Employee

Hi @Greg H , according to this document:

When you use Azure Resource Manager for email notifications, you can send email to the members of a subscription's role. Email is only sent to Microsoft Entra ID user members of the role.

Please make sure that your Monitoring Readers role is set at the subscription level, not at resource group or any other level.

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Greg H 35 Reputation points

2023-12-26T23:33:17.5566667+00:00

All users are assigned at the subscription level and are intra users as per my original post. I still get no email notifications from the alert it self or from running a test on the action group.
Silvia Wibowo 6,071 Reputation points Microsoft Employee

2023-12-27T04:19:12.3166667+00:00

Hi @Greg H , according to the same document:

If your primary email doesn't receive notifications, configure the email address for the Email Azure Resource Manager role: <there are 4 steps>
Greg H 35 Reputation points

2023-12-27T13:27:07.1266667+00:00

This documentation cited looks pretty out of date. The users page on intra does not look like that anymore. However I am able to verify that the accounts specified in the role have an email address set in intra.
Monalla-MSFT 13,166 Reputation points Moderator

2023-12-27T15:44:38.75+00:00

Greg H - Thank you for providing the feedback about the docs. We will take this feedback and update the docs accordingly. But I request you to open the feedback for docs here.

Hope that the issue is resolved for you now. Please reach out back to us if you have any further questions.
Greg H 35 Reputation points

2023-12-27T15:57:28.8133333+00:00

The issue is not resolved.
Monalla-MSFT 13,166 Reputation points Moderator

2023-12-28T02:51:33.8233333+00:00
Thanks for your response. Looks like we need to troubleshoot this further, we would like to put you in touch with a support engineer so you can receive 1:1 support for a deeper investigation on this.

We would need you to send us an email at AzCommunity@Microsoft.com by providing below details.

Subject : ATTN:Monika

Subscription ID

A link to this thread.

Please email us these details and we will work with you closely to get this issue taken care of and also post any findings here in the thread so the community can benefit from it.

Thanks in advance. Looking forward for your email.
Greg H 35 Reputation points

2023-12-28T03:31:34.1433333+00:00

I have just retested and the notifications seem to have started working. It seems there is quite a delay in having the configuration take effect when setting up an action group using the resource manager roles. Is this a known issue?
Silvia Wibowo 6,071 Reputation points Microsoft Employee

2024-01-03T02:56:30.13+00:00

Hi @Greg H, the same document has this note:

It can take up to 24 hours for a customer to start receiving notifications after they add a new Azure Resource Manager role to their subscription.
Henrik Rading 0 Reputation points

2025-02-25T08:27:55.2333333+00:00

I know this Issue is old and has been closed, but I'm facing the exact same problem in multiple tenants and subscriptions.
If I configure the alert rule to send to the "Owners" RBAC rule, it works, but none of the "Monitoring contributors" or "monitoring readers" members gets notified. Role has been defined on the subscription level, all members have proper email addresses configured (and they work if added to Owners role). It has been more than 24 hrs since the roles were added to subscription.

When performing test on the action group, it succeeds without issues. but running the troubleshooter afterwards reveals this entry in diagnostics:
Created time - Action type - Failure reason
<timestamp> - ArmRole> - Arm role resolved with no email address

Can anyone shed a light on why the email addresses are not resolved?
Silvia Wibowo 6,071 Reputation points Microsoft Employee

2025-02-26T20:12:01.5466667+00:00

Hi @Henrik Rading , have you tried the steps from "If your primary email doesn't receive notifications, configure the email address for the Email Azure Resource Manager role" from this document?
Henrik Rading 0 Reputation points

2025-02-27T07:02:14.6933333+00:00

Hi @Silvia Wibowo Yes, we tried that as well. But it seems to be working now. Removed all role assignments from the subscription, re-added them, and after more than 48 hrs we started to recieve mails through the "Monitoring Contributor" role membership. Just wondering why it takes that long to work.