Error when attempting to create an action group in the Azure portal

Question

I am trying to create an alert with a log analytics workspace and receive the following error.

Failed to create action group. Error: The client '*****@xxxx.xxx' with object id 'xxxxx' does not have authorization to perform action 'microsoft.insights/actiongroups/write' over scope xxxxxxxxxxxx or the scope is invalid.*

The scope must be valid since it was created by selecting from dropdown boxes. My research indicates that an account needs to be an Owner, Contributor or Monitoring Contributor to create Action Groups. Checking IAM for the resource group shows that my account has the Monitoring Contributor role. This was assigned 18 hours previously.

Any suggestions on how to resolve this? Is it a glitch in Azure?

Thank you,

Answer 1

Hi Mike
If you've recently been assigned the Monitoring Contributor role, it may take some time for the permissions to fully propagate across the system. Please wait a few minutes and then refresh your session to ensure that the updated permissions are applied.
https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/action-groups#create-an-action-group-in-the-azure-portal

If the issue persists, it’s worth checking if your account has the necessary permissions at the correct scope (subscription, resource group, or resource level). In some cases, roles such as Owner or Contributor may be required to create and manage action groups.

let us know if any help, we will always help as you needed.!

---

If the answer is helpful, please and "Upvote it".