Share via

Event Grid system topic integration support

EatQ Team 0 Reputation points
2025-05-08T04:31:11.1833333+00:00

Hello Community Support,

I am working with an Azure API Management (APIM) instance using the Developer SKU and would like to create an Event Grid subscription for the Microsoft.ApiManagement.UserCreated event. My goal is to trigger an Azure Function whenever a new user is created in APIM.

I have already ensured that:

The System-assigned Managed Identity is enabled on my APIM instance.

The Microsoft.EventGrid resource provider is registered.

My Function App and APIM are in the same subscription and region.

The APIM identity has been assigned the EventGrid EventSubscription Contributor role.

However, when I try to create the event subscription (via both the Azure Portal and CLI), there is an error with the put request, which is in the Write EventSubscription details:

PUT request for https://management.azure.com/subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/Microsoft.ApiManagement/service/<apim-name>/eventGridFilters/<event-sub-name>?api-version=2022-08-01 failed with status code: BadRequest, code: ValidationError and message: System-assigned managed identity is not enabled on API Management service..

The API call references the eventGridFilters resource type, and appears to be blocked due to an internal configuration flag.

Please enable Event Grid system topic integration support for my API Management instance so that I can use Event Grid to subscribe to APIM events.

What do people suggest I do? I tried opening a ticket but can never get through the endless drop downs of selections in Azure.

Thanks,
Sean

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,385 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michele Ariis 5 Reputation points MVP
    2025-05-08T14:44:16.1333333+00:00

    Hi Sean, it is usually a “false positive”:

    Check that the MI is really active:

    az apim show -g <RG> -n <APIM> --query identity

    az apim update -g <RG> -n <APIM> --set identity.type=SystemAssigned

    Avoid eventGridFilters and create the subscription directly:

    az eventgrid event-subscription create \

    --name onUserCreated \

    --source-resource-id /subscriptions/.../resourceGroups/.../providers/Microsoft.ApiManagement/service/<APIM> \

    --endpoint https://<your-func>.azurewebsites.net/api/OnUserCreated?code=<code> \

    --included-event-types Microsoft.ApiManagement.UserCreated

    Refresh the Azure CLI and eventgrid extension and check that there are no policies blocking systemTopics.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.