851 questions with Azure Policy tags

Sort by: Updated
Updated Created Answers
0 answers

We have multiple Licenses I want to Implement Conditional Access Policy

Hello Everyone, We have multiple Licenses I want to Implement Security on all users. I created a Group, added all Company users to this group, and assigned a P1 license to this group. I want to Implement a Conditional Access policy to block all new users…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,043 questions
asked 2024-08-22T10:42:46.56+00:00
Fahad Gul 0 Reputation points
edited the question 2024-08-22T15:29:59.72+00:00
VarunTha 6,950 Reputation points Microsoft Vendor
0 answers

Is it possible to deploy Azure VM extension for SAP solutions using Azure Policy?

Hi, I would like to deploy Azure VM extension for SAP solutions at scale with Azure Policy. I didn't found one, so I'm wondering if there is any blocker for creating such policy? Any Azure Policy limitations or any steps within SAP Extension deployment…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,698 questions
SAP HANA on Azure Large Instances
SAP HANA on Azure Large Instances
Microsoft branding terminology for an Azure offer to run HANA instances on SAP HANA hardware deployed in Large Instance stamps in different Azure regions.
121 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-22T09:21:43.1466667+00:00
Jakub Chwała 0 Reputation points
edited a comment 2024-08-22T12:55:55.5033333+00:00
Akshay kumar Mandha 0 Reputation points Microsoft Vendor
1 answer

How to prevent a normal user to see a subscription or cancel or add a subscription?

A regular user has access to some resource groups under a subscription. If users search "Subscription" in the Azure portal, they can see related subscriptions, and also they can "Cancel" or "Add" subscriptions. I'm unsure…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,043 questions
asked 2024-08-14T20:24:57.9833333+00:00
Mohsen Akhavan 791 Reputation points
edited a comment 2024-08-22T09:31:35.5866667+00:00
Abdul 2,540 Reputation points Microsoft Vendor
1 answer

Readonly Tags in Resource Groups

How to keep the tags in Azure Resource Group as read-only. We have job which update tags based on external system every day, i dont want anyone manually update the tags which are added/updated by the Job. How do i do that. Currently we give contributor…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-14T16:12:33.5633333+00:00
RajNair 216 Reputation points
commented 2024-08-22T08:23:01.88+00:00
Abdul 2,540 Reputation points Microsoft Vendor
1 answer

Graph query for accessing details of Azure storage, data management lifecycle policies

I'm trying to create a query that will retrieve the details of a lifecycle management policy held against our azure storage accounts and I'm struggling to find the right properties to retrieve the details I need. Firstly, is this possible using Graph and…

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,040 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,671 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-15T12:58:59.06+00:00
Ben Wild 0 Reputation points
edited a comment 2024-08-20T06:08:03.17+00:00
Hitesh Pachipulusu - MSFT 1,100 Reputation points Microsoft Vendor
1 answer

Require a tag and its value on resources

To Whom Can assist: Using the "Require a tag and its value on resources" policy, I am trying to enforce requiring Tags on resource groups and resources. However how can I create a custom policy that would ensure that I can have multiple…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-07-12T20:41:42.07+00:00
Bisi Ajala 0 Reputation points
commented 2024-08-19T14:20:48.7566667+00:00
Bisi Ajala 0 Reputation points
2 answers

How to remove the expired Azure Policy Exemption. Do we need to remove from Portal or Github first?

How to remove the expired Azure Policy Exemption. Do we need to remove from Portal or Github first? Which is best practice?

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-14T14:14:04.35+00:00
Madhusudhana Rao Dasari 0 Reputation points
answered 2024-08-15T02:28:25.7733333+00:00
brtrach-MSFT 15,866 Reputation points Microsoft Employee
1 answer

Readonly Tags in Resource Groups

How to keep the tags in Azure Resource Group as read-only. We have job which update tags based on external system every day, i dont want anyone manually update the tags which are added/updated by the Job. How do i do that. Currently we give contributor…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-14T16:14:11.67+00:00
RajNair 216 Reputation points
edited the question 2024-08-14T21:37:44.5066667+00:00
VarunTha 6,950 Reputation points Microsoft Vendor
0 answers

How to correct RequestDisallowedByPolicy

Good Day I am trying to complete the course: Microsoft Azure AI Fundamentals: AI Overview, as I have an exam voucher that expires on 13 September. I have progressed to the second unit: Fundamentals of Machine Learning and I am now at the stage where I am…

Azure Machine Learning
Azure Machine Learning
An Azure machine learning service for building and deploying models.
2,791 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-12T09:20:11.4166667+00:00
Nureyin Reddy 0 Reputation points
commented 2024-08-14T08:33:14.5+00:00
dupammi 8,455 Reputation points Microsoft Vendor
2 answers

Custom Policy for "Ensure Storage logging is Enabled for Blob Service for 'Read', 'Write', and 'Delete' requests" is not giving desired result

I have written below Custom Policy to check whether Audit logs are enabled or not for Blob Service. It is not working when i only enable the logs for blob service. My requirement is to check only for blob service. Not for whole Storage account. Below…

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,748 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-05T11:01:09.9833333+00:00
shashank rastogi 0 Reputation points
commented 2024-08-14T05:25:42.0333333+00:00
Nehruji R 6,121 Reputation points Microsoft Vendor
1 answer

Can Azure Policy parse extension settings to evaluate existence condition & compliance?

Our requirement is to build an Azure Policy with Deploy If Not Exists effect to deploy/update an extension with certain settings. We are using the below existence condition of our custom policy. The issue is, upon assigning the policy, even after…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-02T16:55:01.4433333+00:00
Venkata Naga Kartik Pidatala 5 Reputation points Microsoft Employee
commented 2024-08-13T11:36:38.7833333+00:00
Joshua Bines 0 Reputation points
1 answer One of the answers was accepted by the question author.

How to create policy to deny direct user assignment to Privileged roles instead assigning roles via groups

I need to create a policy to deny direct user assignment to Entra privileged roles and force them to use groups instead for privileged role assignments.

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,043 questions
asked 2024-08-05T12:00:59.8966667+00:00
curious7 171 Reputation points
commented 2024-08-13T09:25:36.5866667+00:00
Abdul 2,540 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

Understanding Inconsistent data return for Azure Powershell command Get-AzPolicyDefinition

Hi, I'm encountering inconsistent data return for the Azure Powershell command Get-AzPolicyDefinition. I have a script that obtains compliance reports for Azure Policy Initiatives and I iterate over each compliance item to obtain more information. I'm…

Azure Automation
Azure Automation
An Azure service that is used to automate, configure, and install updates across hybrid environments.
1,216 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,399 questions
asked 2024-08-07T03:23:24.6333333+00:00
Jaswanth G 20 Reputation points
commented 2024-08-07T14:20:36.76+00:00
Jaswanth G 20 Reputation points
1 answer

Is there a way to force the naming of resources that automatically gets setup within Azure?

Good Day At times there are resources that gets automatically created from within ARM. That are dependencies to other resources you create. Or at times you cannot set the name of a particular service. For example the Gateway subnet will always be…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2021-05-17T08:18:30.237+00:00
Desmond Richard 11 Reputation points
commented 2024-08-07T11:23:45.0966667+00:00
EPNAdam 35 Reputation points
2 answers One of the answers was accepted by the question author.

Custom policy to deploy diagnostic settings to subscription activity logs

Hello, Ms has build usefully policy to deploy diagnostic setting to forward subscription activity logs to Log Analytys: Configure Azure Activity logs to stream to specified Log Analytics workspace Policy currently activates all categories but we would…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2023-04-24T06:43:43.7166667+00:00
Bombbe 1,621 Reputation points
edited a comment 2024-08-06T20:26:08.5466667+00:00
Vijay Kumar 0 Reputation points
2 answers

Can Azure Policy parse extension settings to evaluate existence condition & compliance?

Our requirement is to build an Azure Policy with Deploy If Not Exists effect to deploy/update an extension with certain settings. We are using the below existence condition of our custom policy. The issue is, upon assigning the policy, even after…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-01T16:45:57.1366667+00:00
Venkata Naga Kartik Pidatala 5 Reputation points Microsoft Employee
answered 2024-08-06T10:27:09.55+00:00
Sebastian Hoff 0 Reputation points Microsoft Employee
1 answer

Can Azure Policy parse extension settings to evaluate existence condition & compliance?

We want to build a policy with Deploy If Not Exists (effect) to deploy/update an extension with appropriate settings. We have the below existence condition with the last condition about the presence of a certain setting in extension settings. Is this…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
asked 2024-08-01T16:32:31.4+00:00
Venkata Naga Kartik Pidatala 5 Reputation points Microsoft Employee
commented 2024-08-05T16:18:22.45+00:00
Venkata Naga Kartik Pidatala 5 Reputation points Microsoft Employee
2 answers One of the answers was accepted by the question author.

Disallowing users to modify the Network Security Group, Firewall and VNET settings in my Azure Subscriptions?

I wanted to restrict the ability for the users to add and modify the NSG rule for all users, except the member of the Azure cloud-only group called "Network-Team". This policy must be enforced for all Network settings like NSG, VNET or firewall…

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,354 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,317 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,043 questions
asked 2024-07-25T13:42:50.6566667+00:00
EnterpriseArchitect 5,276 Reputation points
commented 2024-08-05T07:11:57.2833333+00:00
EnterpriseArchitect 5,276 Reputation points
1 answer

I am unable to create my azure student free subscription

I am university student pursuing my bachelor degree and unable to create my azure free student subscription. I need your help to create my Azure student free subscription account. ? I've completed the verification process, but I'm still having trouble .…

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,040 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
Azure Update Manager
Azure Update Manager
An Azure service to centrally manages updates and compliance at scale.
284 questions
Azure Startups
Azure Startups
Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.Startups: Companies that are in their initial stages of business and typically developing a business model and seeking financing.
246 questions
asked 2024-08-02T05:35:28.66+00:00
mustafa gharakiya wala 0 Reputation points
edited the question 2024-08-02T07:29:52.96+00:00
AmaranS 5,380 Reputation points Microsoft Vendor
1 answer

Denying OpenAI Resource Creation with Abuse Monitoring Enabled using Azure Policy

How can I create an Azure policy to deny the creation of OpenAI resources with abuse monitoring enabled, when my current policy only marks resources as non-compliant after creation? PS - Based on common issues that we have seen from customers and other…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
851 questions
Azure OpenAI Service
Azure OpenAI Service
An Azure service that provides access to OpenAI’s GPT-3 models with enterprise capabilities.
2,789 questions
asked 2024-08-01T08:17:29.8633333+00:00
SwathiDhanwada-MSFT 18,656 Reputation points
answered 2024-08-01T08:17:51.9233333+00:00
SwathiDhanwada-MSFT 18,656 Reputation points