SQL server vulnerability scan reports have recipients

# Enable VA (classic) on a SQL Server and configure recipients
resource "azurerm_mssql_server_vulnerability_assessment" "<example_resource_name>" {
  server_id                = "<example_resource_id>"
  storage_container_path   = "https://<example_storage_account>.blob.core.windows.net/<example_container>" # CRITICAL: enables VA classic by setting storage container
  storage_account_access_key = "<example_storage_key>"

  recurring_scans {
    enabled                   = true
    email_subscription_admins = true # CRITICAL: configures scan report recipients (subscription admins)
  }
}

// Configure VA (classic) on a SQL Server and set recipients
resource sqlServer 'Microsoft.Sql/servers@2021-11-01' existing = {
  name: '<example_resource_name>'
}

resource va 'Microsoft.Sql/servers/vulnerabilityAssessments@2021-11-01' = {
  name: 'Default'
  parent: sqlServer
  properties: {
    storageContainerPath: 'https://<example_storage_account>.blob.core.windows.net/<example_container>' // CRITICAL: enables VA classic by setting storage container
    storageAccountAccessKey: '<example_storage_key>'
    recurringScans: {
      isEnabled: true
      emailSubscriptionAdmins: true // CRITICAL: configures scan report recipients (subscription admins)
    }
  }
}