Fixing Azure VM Agent Metrics Visibility in Site24x7

Azure VM Agent-level metrics not visible

Problem

After integrating the Site24x7 server agent with Azure VMs, agent-level metrics are not visible in the Site24x7 dashboard. The agent fails to install the required monitoring extension on the Azure VM.

Error message

  1. {"error":{"code":"AuthorizationFailed","message":"The client 'clientID' with object id 'ObjectID' does not have authorization to perform action 'Microsoft.Compute/virtualMachines/extensions/write' over scope '/subscriptions/placeholdertext/resourceGroups/sm-east1-prod/providers/Microsoft.Compute/virtualMachines/azureuatdevice/extensions/Site24x7WindowsServerExtn' or the scope is invalid. If access was recently granted, please refresh your credentials."}}

This error means

The application registered in Azure for Site24x7 authentication does not have permission to write VM extensions to the Azure VM. Specifically, it is missing the Microsoft.Compute/virtualMachines/extensions/write action on the target subscription scope.
Site24x7 requires this permission to install the Site24x7WindowsServerExtn monitoring extension on the VM.

Cause

To install the server monitoring extension on Azure VMs, the application used for Site24x7 authentication must have the Contributor role assigned at the subscription level where the VMs reside. Without this role, Azure blocks the extension installation with an AuthorizationFailed error.

Solution

Follow the steps below in the Azure Portal to grant the Contributor role to the Site24x7 client application.
  1. Go to the Azure Portal: Sign in at portal.azure.com with an account that has Owner or User Access Administrator rights on the subscription.
  2. Open the subscription: Click Subscriptions in the left navigation (or search for it) and select the subscription where the Azure VM resides.
  3. Open Access Control (IAM): Click Access Control (IAM) in the left navigation menu of the subscription.
  4. Add a role assignment: Click + Add on the top banner and select Add role assignment.
  5. Select the Contributor role: On the Role tab, select Privileged administrator roles and choose Contributor. Click Next.
  6. Select the Site24x7 application: On the Members tab, click + Select members. Search for and select the Site24x7 client application registered in your Azure AD tenant. Click Select, then Next.
  7. Review and assign: Review the role assignment details and click Review + assign to apply the permissions.

Verification

After the role assignment and the propagation period, verify the fix as follows:
  1. In the Azure Portal, go to the VM → Extensions + applications. Confirm that Site24x7WindowsServerExtn appears with a status of Provisioning succeeded.
  2. In the Site24x7 dashboard, open the Azure VM monitor and confirm that agent-level metrics (CPU, memory, disk, process data) are now populating.
  3. If the extension still does not appear after 3 hours, re-check the role assignment under Access Control (IAM) → Role assignments and confirm the correct application is listed with the Contributor role.
Notes
  1. The Contributor role is required at the subscription level, not just the resource group level, to allow extension installation across all VMs in the subscription.
  2. This requirement applies to both Windows (Site24x7WindowsServerExtn) and Linux (Site24x7LinuxServerExtn) Azure VMs.