Most patching dashboards are great for interactive views—but what if your stakeholders want a scheduled email that shows the current patch compliance for only a scoped set of servers (for example, those tagged for patch governance)? That’s where a small, reliable custom report shines.
In this post I’ll walk through the exact solution I built: a Logic App that queries Azure Update Manager data via Azure Resource Graph (ARG), filters to VMs tagged Monthly_Patch : yes, formats the results into a clean HTML email, and sends it on a monthly cadence.
Why a custom report?
- No native email report: Azure Update Manager provides blades and workbooks, but not a ready-to-send, nicely formatted email.
- Audience-specific scoping: We only want to report on VMs with a specific business tag (
Monthly_Patch : yes). - Consistent sorting & formatting: Stakeholders wanted alphabetical order, readable timestamps, color-coded rows, and centered table content.
- Lightweight & fast: With ARG we can query Update Manager resources directly—no Log Analytics workspace required for this report.

