Disabled
The disabled
effect is useful for testing situations or for when the policy definition has parameterized the effect. This flexibility makes it possible to disable a single assignment instead of disabling all of that policy's assignments.
Note
Policy definitions that use the disabled
effect have the default compliance state Compliant after assignment.
An alternative to the disabled
effect is enforcementMode
, which is set on the policy assignment. When enforcementMode
is disabled
, resources are still evaluated. Logging, such as Activity logs, and the policy effect don't occur. For more information, see policy assignment - enforcement mode.
Next steps
- Review examples at Azure Policy samples.
- Review the Azure Policy definition structure.
- Understand how to programmatically create policies.
- Learn how to get compliance data.
- Learn how to remediate non-compliant resources.
- Review Azure management groups.