I am currently managing around 100 different Azure subscriptions and I want to allow subscription owners to create their own alerts. However, I want all these alerts to use the same Logic App to send the alerts via an Action Group.

At the moment, I have a centralized Action Group, but I am unsure about the best practices in this scenario. Should I grant all subscription owners permissions to my centralized Action Group, or should I create an individual Action Group per subscription that uses the Logic App?

If the centralized solution is the recommended approach, what permissions are needed for the owners to be able to see and use the Action Group for their alerts?

Any guidance or suggestions would be greatly appreciated.

If it is the centrialized solution, what permissions is needed for the owners to be able to see and use the action group for their alerts?