Fixing Azure VM Agent Metrics Visibility in Site24x7

Azure VM Agent-level metrics not visible

Problem

After integrating the Site24x7 server agent with Azure VMs, agent-level metrics are not visible in the Site24x7 dashboard. The agent fails to install the required monitoring extension on the Azure VM.

Error message

  1. {"error":{"code":"AuthorizationFailed","message":"The client 'clientID' with object id 'ObjectID' does not have authorization to perform action 'Microsoft.Compute/virtualMachines/extensions/write' over scope '/subscriptions/placeholdertext/resourceGroups/sm-east1-prod/providers/Microsoft.Compute/virtualMachines/azureuatdevice/extensions/Site24x7WindowsServerExtn' or the scope is invalid. If access was recently granted, please refresh your credentials."}}

This error means

The application registered in Azure for Site24x7 authentication does not have permission to write VM extensions to the Azure VM. Specifically, it is missing the Microsoft.Compute/virtualMachines/extensions/write action on the target subscription scope.
Site24x7 requires this permission to install the Site24x7WindowsServerExtn monitoring extension on the VM.

Cause

To install the server monitoring extension on Azure VMs, the application used for Site24x7 authentication must have the Contributor role assigned at the subscription level where the VMs reside. Without this role, Azure blocks the extension installation with an AuthorizationFailed error.

Solution

Follow the steps below in the Azure Portal to grant the Contributor role to the Site24x7 client application.
  1. Go to the Azure Portal: Sign in at portal.azure.com with an account that has Owner or User Access Administrator rights on the subscription.
  2. Open the subscription: Click Subscriptions in the left navigation (or search for it) and select the subscription where the Azure VM resides.
  3. Open Access Control (IAM): Click Access Control (IAM) in the left navigation menu of the subscription.
  4. Add a role assignment: Click + Add on the top banner and select Add role assignment.
  5. Select the Contributor role: On the Role tab, select Privileged administrator roles and choose Contributor. Click Next.
  6. Select the Site24x7 application: On the Members tab, click + Select members. Search for and select the Site24x7 client application registered in your Azure AD tenant. Click Select, then Next.
  7. Review and assign: Review the role assignment details and click Review + assign to apply the permissions.

Verification

After the role assignment and the propagation period, verify the fix as follows:
  1. In the Azure Portal, go to the VM → Extensions + applications. Confirm that Site24x7WindowsServerExtn appears with a status of Provisioning succeeded.
  2. In the Site24x7 dashboard, open the Azure VM monitor and confirm that agent-level metrics (CPU, memory, disk, process data) are now populating.
  3. If the extension still does not appear after 3 hours, re-check the role assignment under Access Control (IAM) → Role assignments and confirm the correct application is listed with the Contributor role.
Notes
  1. The Contributor role is required at the subscription level, not just the resource group level, to allow extension installation across all VMs in the subscription.
  2. This requirement applies to both Windows (Site24x7WindowsServerExtn) and Linux (Site24x7LinuxServerExtn) Azure VMs.

    • Related Articles

    • Understanding VMware VM and guest OS metrics

      Log in to your Site24x7 account, and navigate to VMware > Virtual Machine. Click on any desired VM name. Metrics from the VM monitor The metrics that you view are your VM's occupancy in its parent ESX host. Using Memory Utilization as an example, the ...

    • Comparison between Site24x7 VMware Monitoring and VM monitoring using Site24x7 server agent

      Site24x7 VMware Monitoring capabilities Site24x7 VMware monitoring is agentless. An On-Premise Poller acts as a probe to collect data and sends it to Site24x7. With Site24x7 VMware Monitoring, you will be able to: Monitor vCenter Monitor VMware ...

    • FAQ on Azure service quota monitoring

      How does Site24x7 collect Azure service quota data? Site24x7's Azure monitoring tool collects Azure service quota data via API calls. Where should I update the quota metric profile after adding a service quota monitor? Click the hamburger icon near ...

    • List of log files generated and maintained by the Site24x7 server monitoring agent

      Here is the list of log files generated by the Linux and Windows server monitoring agent. The log files are stored in the same directory where the agent source file is installed. By default they are at: For Linux : ...

    • How many API calls does Site24x7 Azure monitor make

      Site24x7 Azure monitoring uses APIs to retrieve the health and performance metrics, as well as the configuration data on your Azure resources. Microsoft charges based on the total number of API calls made. Therefore, the cost incurred is directly ...