The Service Principal page indicates that the subscription status is healthy; however, upon clicking on the subscription, it is shown as critical.

Products

• CloudHealth

Issue/Introduction

The Service Principal selected for the Enterprise Agreement (EA) is used to determine the status of all subscriptions currently under the EA. 

You can check if a particular service principle is mapped to EA using - Setup >> Accounts >> Azure Enrollments


Subscription will have 'critical' status under EA mapped SP.


Although, status will be 'healthy' under SP which has reader role access to Subscription.

Resolution

If a subscription is associated with an SP mapped to the Enterprise Agreement (EA), but the SP lacks reader role access, the subscription status will be marked as 'critical' due to insufficient permissions.  

Although this is a cosmetic issue, the platform will still have access to retrieve asset metadata. You can provide a link displaying recent costs (from the past few days) along with asset reports, such as Virtual Machines, showing recently collected assets for that subscription.