Hi, I Exported the azure policy definitions through the azure PowerShell in CSV format, I got the details but metadata like available effects, Definitions type data is not fetched in the CSV file (Attributes details are missing). File attached for the information. Below is the script through which is used to exported the Policy definitions. Get-AzPolicyDefinition | Select-Object -ExpandProperty properties | Select-Object -Property Metadata, DisplayName, Description, PolicyType, Definitiontype, AvailableEffects | Export-CSV "./policyDefinitionn.csv" Troubleshooting done: cleared the cache of the browser but didn't help tried with different browser didn't help tried with admin console that also didn't help in admin console below is error am getting. PS C:\WINDOWS\system32> $policyDefinitions | Export-Csv -Path 'D:\PolicyDefinitions.csv' Export-Csv : Cannot bind argument to parameter 'InputObject' because it is null. At line:1 char:22 + $policyDefinitions | Export-Csv -Path 'D:\PolicyDefinitions.csv' + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidData: (:) [Export-Csv], ParameterBindingValidationException + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.ExportCsvCo mmand PS C:\WINDOWS\system32> $policyDefinitions | Export-Csv -Path 'C:\PolicyDefinitions.csv' Export-Csv : Cannot bind argument to parameter 'InputObject' because it is null. At line:1 char:22 + $policyDefinitions | Export-Csv -Path 'C:\PolicyDefinitions.csv' + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidData: (:) [Export-Csv], ParameterBindingValidationException + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.ExportCsvCo mmand

Hi @Prateek Rana , In Azure Portal, we have a column named 'Definition type' under 'Definitions' tile in Azure Policies which has value either as 'Policy' or 'Initiative' but in Azure PowerShell Get-AzPolicyDefinition gets policy definitions whereas Get-AzPolicySetDefinition gets policy set definitions i.e., policy set definitions under initiatives so you may leverage both the cmdlets and collate the list and then export it to CSV at the end. That takes care of 'DefinitionType'. Next, when you say 'AvailableEffects', did you mean allowed effect values under a definition which are provided under parameters property? If yes, then you could get them using below code sample. Same way you may get it for policy sets as well. Code sample: Get-AzPolicyDefinition | Select-Object @{Name="Metadata"; Expression={$_.Properties.Metadata}}, @{Name="DisplayName"; Expression={$_.Properties.DisplayName}}, @{Name="Description"; Expression={$_.Properties.Description}}, @{Name="PolicyType"; Expression={$_.Properties.PolicyType}}, @{Name="Definitiontype"; Expression={"Policy"}}, @{Name="AvailableEffects"; Expression={$_.Properties.Parameters.effect.allowedValues}} Output sample:

Unable to export the azure policy definitions metadata like available effects, Definitions type

Accepted answer

tbgangav-MSFT 10,381 Reputation points

2023-04-25T09:55:13.1166667+00:00
Hi @Prateek Rana ,

In Azure Portal, we have a column named 'Definition type' under 'Definitions' tile in Azure Policies which has value either as 'Policy' or 'Initiative' but in Azure PowerShell Get-AzPolicyDefinition gets policy definitions whereas Get-AzPolicySetDefinition gets policy set definitions i.e., policy set definitions under initiatives so you may leverage both the cmdlets and collate the list and then export it to CSV at the end.

That takes care of 'DefinitionType'. Next, when you say 'AvailableEffects', did you mean allowed effect values under a definition which are provided under parameters property? If yes, then you could get them using below code sample. Same way you may get it for policy sets as well.

Code sample:

Get-AzPolicyDefinition | Select-Object @{Name="Metadata"; Expression={$_.Properties.Metadata}}, @{Name="DisplayName"; Expression={$_.Properties.DisplayName}}, @{Name="Description"; Expression={$_.Properties.Description}}, @{Name="PolicyType"; Expression={$_.Properties.PolicyType}}, @{Name="Definitiontype"; Expression={"Policy"}}, @{Name="AvailableEffects"; Expression={$_.Properties.Parameters.effect.allowedValues}}

Output sample:
Please sign in to rate this answer.

1 person found this answer helpful.
Prateek Rana 60 Reputation points

2023-04-28T15:53:45.1633333+00:00

This shared code is working but still Definition-ID is missing Post fetching, I used the below code

Get-AzPolicyDefinition | Select-Object @{Name="Metadata"; Expression={$.Properties.Metadata}}, @{Name="DisplayName"; Expression={$.Properties.DisplayName}}, @{Name="Description"; Expression={$.Properties.Description}}, @{Name="PolicyType"; Expression={$.Properties.PolicyType}}, @{Name="Definitiontype"; Expression={"Policy"}}, @{Name="AvailableEffects"; Expression={$.Properties.Parameters.effect.allowedValues}}, @{Name="DefinitionID"; Expression={$.Properties.Parameters.providers}} | Format-List

Prateek Rana 60 Reputation points

2023-04-29T09:20:00.51+00:00

But Post Fetching the definition ID data is still missing. Am using the below code

Get-AzPolicyDefinition | Select-Object @{Name="Metadata"; Expression={$.Properties.Metadata}}, @{Name="DisplayName"; Expression={$.Properties.DisplayName}}, @{Name="Description"; Expression={$.Properties.Description}}, @{Name="PolicyType"; Expression={$.Properties.PolicyType}}, @{Name="Definitiontype"; Expression={"Policy"}}, @{Name="AvailableEffects"; Expression={$.Properties.Parameters.effect.allowedValues}}, @{Name="DefinitionID"; Expression={$.Properties.Parameters.DefinitionID.allowedValues}} | Format-List

Can you please take a look into the code and correct it.

Prateek Rana 60 Reputation points

2023-04-30T10:06:10.6066667+00:00

Now I used the below code and DefinitionID is fetching with false value.

Get-AzPolicyDefinition | Select-Object @{Name="Metadata"; Expression={$.Properties.Metadata.category -eq 'Tags'}}, @{Name="DisplayName"; Expression={$.Properties.DisplayName}}, @{Name="Description"; Expression={$.Properties.Description}}, @{Name="PolicyType"; Expression={$.Properties.PolicyType}}, @{Name="Definitiontype"; Expression={"Policy"}}, @{Name="AvailableEffects"; Expression={$.Properties.Parameters.effect.allowedValues}}, @{Name="DefinitionId"; Expression={$.Properties.category -eq 'metadata'}} | Format-List

tbgangav-MSFT 10,381 Reputation points

2023-04-30T14:20:00.9466667+00:00

Hi @Prateek Rana ,

To get policy definition id also, you would have to run the below command.

Get-AzPolicyDefinition | Select-Object @{Name="Metadata"; Expression={$_.Properties.Metadata}}, @{Name="DisplayName"; Expression={$_.Properties.DisplayName}}, @{Name="Description"; Expression={$_.Properties.Description}}, @{Name="PolicyType"; Expression={$_.Properties.PolicyType}}, @{Name="Definitiontype"; Expression={"Policy"}}, @{Name="AvailableEffects"; Expression={$_.Properties.Parameters.effect.allowedValues}}, @{Name="DefinitionID"; Expression={$_.PolicyDefinitionId}}

Sample Output:

The key is you should check in which level the policy definition id is present and what's the exact property name that it's using for policy definition id. To get that use Get-Member cmdlet as shown below where you can see that PolicyDefinitionId is the property name and its in first level out of output itself but not present inside properties property or someother property so you would have to use $_.PolicyDefinitionId in the expression under Select-Object cmdlet.

Prateek Rana 60 Reputation points

2023-04-30T15:23:15.6033333+00:00

But Am unable to fetch the Policies which are inside Definition initiative (Specific), for example I have default New Zealand ISM Restricted policy definition initiative (BuiltIn ) it have 132 policies inside. Below is example I have tried. This code I found in Microsoft document but still it not working.

Tried this method as well but the code is unable to found the policy initiative.

When I used the below code I got only the definition initiative details not the policies details which are inside the definition initiative. For this I used the below code and only get the details of all definition initiative which we have bydefault from microsoft.

Prateek Rana 60 Reputation points

2023-04-30T15:30:46.6733333+00:00

Asmaa Alaaeldien Hussien Soliman 11 Reputation points

2023-04-30T15:37:38.76+00:00

It was helpful

tbgangav-MSFT 10,381 Reputation points

2023-05-01T15:32:23.4+00:00

Hi @Prateek Rana ,

Description of "Name" parameter of Get-AzPolicySetDefinition cmdlet says "The policy set definition name" which is not correct because "Name" parameter takes ID of the policy set definition id but not the name of the policy set definition as shown in below screenshots. So, I have raised this issue with Az PowerShell engineering team to either change the parameter name from "Name" to be more appropriate and/or update the description of the Name parameter to avoid confusion.

Meanwhile, to get policy definition details related to a policy set definition, use below command. For illustration of sample output, check below screenshots.

(Get-AzPolicySetDefinition |?{$_.Properties.DisplayName -eq "NIST SP 800-171 Rev. 2"}).Properties.PolicyDefinitions

Prateek Rana 60 Reputation points

2023-05-12T13:35:15.3+00:00

I Use the above Script you shared but Still affect data is missing in it.

There is no affect details fetched by this script

Prateek Rana 60 Reputation points

2023-05-12T15:06:03.0633333+00:00

When I use the below code am getting the policy details inside the initiative but Affect details are missing

(Get-AzPolicySetDefinition |?{$_.Properties.DisplayName -eq "NIST SP 800-171 Rev. 2"}).Properties.PolicyDefinitions

When I change the initiative let say "Azure security benchmark" and "ASC default" not getting any details even Fetched file is totally blank no data in it.

See the below file fetched for ASC default Initiative that is totally blank no data in it.

When I use the below code am getting the policy details inside the initiative but Affect details are missing

(Get-AzPolicySetDefinition |?{$_.Properties.DisplayName -eq "NIST SP 800-171 Rev. 2"}).Properties.PolicyDefinitions

When I change the initiative let say "Azure security benchmark" and "ASC default" not getting any details even Fetched file is totally blank no data in it.

See the below file fetched for ASC default Initiative that is totally blank no data in it.

Prateek Rana 60 Reputation points

2023-05-15T10:26:23.25+00:00

tbgangav-MSFT 10,381 Reputation points

2023-05-18T05:39:50.83+00:00

Hi @Prateek Rana ,

I have answered to this follow-up question here. Please take a look and let me know.
Sign in to comment