Meh - it works with a secure client... not a service principal. Annoying!

Sounds like a bug. I will report this to the right team.

Hi Stu, our team is looking into it, I'll send you a DM for more info. Thanks for raising this.

Sorry, just seen this. Thanks very much for the updates.

No worries - this was actually a known limitation for both secure clients and full access groups as notifications relies on an individual admin's email address which does not exist for Service Principals or full access groups. We've documented the limitation but are looking at a possible way to workaround it for service principals. In the case of Full Access groups, the workaround is to add "notifications contacts" for emails that need to received the notifications.

Ah thanks. That makes sense, thanks for the feedback.