Unable to view resource groups and action groups

Question

For an Azure API I am trying to create email alerts. This entails creating action groups and resource groups. I do not see either, despite something being made for both. The team is unfamiliar with providing permissions. What needs to be done for me to be able to select a resource group for alerts? Thanks.

Answer 1

An owner or contributor role assigned to the user on the subscription will give the user for the power to create the resource groups or list the groups within the subscription. Hopefully, the following procedure will help to assign the required RBAC permission to the user. Check, if the user can retrieve the resource groups and/or create new after assigning the permissions. Actions groups can be created if there is permission ready for the user

1. Get the subscription ID - Get-AzSubscription
 2. Save the subscription scope in a variable: $subScope = "/subscriptions/00000000-0000-0000-0000-000000000000"
 3. Assign 'contributor' role to the user: New-AzRoleAssignment -SignInName rbacuser@example.com -RoleDefinitionName "Contributor"  -ResourceGroupName "rbac-email-alerts"

---

If the Answer is helpful, please click "Accept Answer" and upvote it

Answer 2

@Butler, Ben I understand that you are trying to create alerts and action groups within the existing resource groups. For your requirement, you can limit the permissions by assigning "Monitoring Contributor" role. This role allows you do to following things.

• View monitoring dashboards in the portal and create their own private monitoring dashboards.
• Set diagnostic settings for a resource.*
• Set the log profile for a subscription.*
• Set alert rule activity and settings via Azure alerts.
• Create web tests and components for Application Insights.
• List shared keys for a Log Analytics workspace.
• Enable or disable monitoring packs in a Log Analytics workspace.
• Create, delete, and execute saved searches in a Log Analytics workspace.
• Create and delete the workspace storage configuration for Log Analytics.

For more information about monitoring roles , you can refer this document. You can assign roles either following steps mentioned by @Manu Philip or you can follow this document.