Azure Update Manager | Maintenance configuration

Andrea Longhitano 200 Reputation points
2026-05-20T12:07:37.1666667+00:00

Hello Everyone,

we have created some maintenance configuration in Azure Update Manager.

Even if the name of the resource is tagetik-prod-patching

maintenanceresources
| where type == "microsoft.maintenance/configurationassignments"

User's image

the id of the resource contains an UUID which is wrong.

This behaviour is randomic because for other maintenance configuration the id is correct.

Could you explain why?

Thanks,

Andrea

Azure Update Manager
Azure Update Manager

An Azure service to centrally manages updates and compliance at scale.


Answer accepted by question author
Suchitra Suregaunkar 16,780 Reputation points Microsoft External Staff Moderator
2026-05-20T15:33:30.62+00:00

Hello @Andrea Longhitano

The GUID in the resource ID is expected behavior, it is not a bug or a random issue.

The query you're running:

maintenanceresources
| where type == "microsoft.maintenance/configurationassignments"

is querying configuration assignment resources, not the maintenance configuration itself. These are two different resource types in Azure:

Resource Type What It Represents
Microsoft.Maintenance/maintenanceConfigurations The actual maintenance configuration you created (e.g., tagetik-prod-patching)
-------- --------
Microsoft.Maintenance/maintenanceConfigurations The actual maintenance configuration you created (e.g., tagetik-prod-patching)
Microsoft.Maintenance/configurationAssignments The link/assignment between a maintenance configuration and a target resource (VM, scope, etc.)

As documented in the ARM template reference for configurationAssignments, the name property of a configuration assignment is simply a string, it does not have to match the maintenance configuration name.

User's image

When assignments are created (especially via the Azure portal, dynamic scopes, or Policy), Azure often auto-generates a unique GUID-based name for the assignment to avoid naming collisions. This is why you see a UUID in the id field for some assignments.

The reason it appears "random" where some assignments have a clean name and others have a GUID , depends on how the assignment was created:

  • Portal or dynamic scope → Azure typically generates a GUID name automatically.
  • CLI / ARM / Bicep with an explicit name → The name you specify is used as-is.

So, your maintenance configuration tagetik-prod-patching is correctly named. The GUID you see belongs to the assignment object that links it to a VM or scope.

If you want to retrieve the actual maintenance configuration name from the assignment, you can extract it from the maintenanceConfigurationId property in the assignment:

maintenanceresources
| where type == "microsoft.maintenance/configurationassignments"
| extend maintenanceConfigName = tostring(split(properties.maintenanceConfigurationId, "/")[-1])
| project name, maintenanceConfigName, id, properties

This will show you the friendly configuration name alongside the assignment ID.

Reference:

Hope this clarifies the behavior! If you have any further questions, feel free to ask.

If you found the comment helpful, please consider clicking "Upvote it."

Thanks,

Suchitra.

Was this answer helpful?

2 people found this answer helpful.

1 additional answer

Sort by: Newest
  1. AI answer

    2026-05-20T12:07:56.29+00:00

    In Azure Update Manager, the apparent “random” GUID in the ID is expected behavior for configuration assignments and doesn’t indicate an error.

    From the Azure Resource Graph log structure for Update Manager:

    • ID is the full Azure Resource Manager path of the object.
    • NAME for records of type <resourcePath>/configurationassignments is documented as “the assignment of maintenance configuration to an Azure or Azure Arc VM” and is a unique GUID for that assignment, not just the friendly name.
    • The TYPE field configurationassignments indicates that the record represents the link between a VM and a maintenance configuration, not the maintenance configuration resource itself.

    For configuration assignments created via ARM/CLI/PowerShell, the resource definition is:

    {
      "type": "Microsoft.Maintenance/configurationAssignments",
      "apiVersion": "2020-04-01",
      "name": "string",
      "location": "string",
      "properties": {
        "maintenanceConfigurationId": "string",
        "resourceId": "string"
      }
    }
    

    The name of this configurationAssignments resource is not required to match the maintenance configuration name. Azure often generates a unique name by appending a GUID (for example, tagetik-prod-patching-b6fd3589-ff9f-43ef-...) to avoid collisions and to uniquely identify each assignment. That’s why:

    • The maintenance configuration resource has the friendly name tagetik-prod-patching.
    • The configuration assignment resource that links this configuration to a VM has a different name/ID that includes a GUID.
    • Other assignments may appear to have a “clean” name if they were created with an explicit name or via a different flow, which can make the behavior look random.

    So the GUID in the configurationAssignments ID is by design: it uniquely identifies the assignment object, not the maintenance configuration itself.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.