Need more details regarding Microsoft Azure Alert Signal named "All Administrative Operations"

Question

While I am going through the below page which explains how to create an alert with Signal named "All Administrative Operations".

I am interested in what specific operations the signal "All Administrative Operations" includes. Is the a page that explains the list of operations this specific signal includes?

Answer 1

​The "All Administrative Operations" corresponds to the equivalent category in the Azure Activity Log and captures a comprehensive range of administrative activities across your Azure resources. This includes operations such as creating, updating, and deleting resources, as well as other management tasks. For instance, in the context of Azure Key Vault, this signal is triggered when there's any activity that matches patterns like "Update," "Delete," or when a vault is used in a deployment within your subscription.

Similarly, for Azure ExpressRoute, the "All Administrative operations" signal encompasses all administrative actions, including the creation, update, and deletion of an ExpressRoute circuit. ​

While a comprehensive, centralized list of all operations included in the "All Administrative Operations" signal isn't readily available (at least AFAIK), understanding that it covers a broad spectrum of administrative activities across various Azure services can help you monitor and respond to significant changes in your environment.​

For more detailed information on specific operations and how they are categorized, you might consider reviewing the Azure Activity Log schema and the documentation for the specific Azure services you're interested in. These resources provide insights into the types of operations that can trigger alerts and how they are logged.​

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin