Azure Alerts for critical operations on Az Recovery vault , even after Azure Resource guard is added

MyAzQuery 166 Reputation points
2022-09-02T09:54:53.287+00:00

As i understand now , we can secure all critical operations on Azure Recovery vault , by using Multi User Authorization , where in add the Azure Resource guard to Azure Recovery vault, as mentioned in below microsoft link

https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization

Using Azure Monitor, we have configured alerts while anyone performs critical operations on Az Recovery vault.

Now when we use Azure Resource guard, the Backup admin has to request the Security admin to perform any critical operations and then perform , once the required access is granted. --- In this situation, will the alerts get fired when the critical operations are performed ?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,790 questions
Azure Backup
Azure Backup
An Azure backup service that provides built-in management at scale.
1,121 questions
0 comments No comments
{count} votes

Accepted answer
  1. Stanislav Zhelyazkov 20,781 Reputation points MVP
    2022-09-02T10:29:50.453+00:00

    Hi,
    It depends on what the condition of those alerts are. For example, if the alert is an activity log alert that has condition to fire when delete protection operation is performed you will still get alert even when the Vault was protected with Resource Guard and operation was performed after approval. The Azure activity logs log any record about create, update, action and delete operations on resources. So whatever operation you perform on the vault and you have alert for it it will fire no matter that it is protected by resource guard or not.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


0 additional answers

Sort by: Most helpful