question

Lee-5784 avatar image
0 Votes"
Lee-5784 asked Lee-5784 commented

Why can't I close alerts in Security Center?

I have a security admin and reader account, yes when I try to close an alert I get a pop up message saying I can't due to missing permissions on the subscription or resource group.

Questions I have:
1. How do I check for this?
2. I have numerous subscriptions, do I need to check each one for this?

Thanks in advance.



azure-security-center
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Lee-5784
Thank you for your post!

  • For the error message you're receiving, can you share a screenshot of it so I can gain a better understanding of your issue?

  • Have you tried to going to Azure Security Center, Security Alerts, and opening the alert to see what specific resource is affected? This way you can try to narrow down the resource/resource group, and potentially figure out the subscription ID that resource belongs to?

108342-image.png


Since I'm unable to reproduce your issue on my end, any screenshots would be greatly appreciated!

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

0 Votes 0 ·
image.png (55.8 KiB)

@JamesTran-MSFT attached is a copy of the error message.108245-err-msg.png


0 Votes 0 ·
err-msg.png (35.1 KiB)

1 Answer

JamesTran-MSFT avatar image
0 Votes"
JamesTran-MSFT answered Lee-5784 commented

@Lee-5784
Thank you for the quick response!

I reached out to our ASC team, and was told that if you're using RBAC roles you should be able to quickly find which subscription is missing permissions. However, if you have any custom roles/groups this can be considerably time consuming to figure out which subscription needs the permissions. Lastly, if you'd like our ASC team to take a closer look into your environment, they'd be able to figure out which permissions you need.


Additional Link:
Permissions in Azure Security Center


If you have any other questions or would like to be enabled for a free technical support request, please let me know.
Thank you for your time and patience throughout this issue.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

· 6
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Lee-5784
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

0 Votes 0 ·

hi James,

Sorry busy day, could you get the ASC team to look into this please.

thanks

Lee

0 Votes 0 ·

Regarding the Azure Subscription ID, we have 83 subscriptions. Do you need each one?

0 Votes 0 ·

@Lee-5784
'Thank you for the quick follow up on this!

One subscription ID of your choosing will work for this, since our engineers can get on a screen share session with you, as needed, to look at your other subscriptions and resolve this issue.

0 Votes 0 ·

Sorry for the delay in replying:

<<Removed SubID>>

0 Votes 0 ·

Email sent.

0 Votes 0 ·