How to block 3party offers from Azure Marketplace for particular Management Groups or Subscriptions?

Michal Anisko 0

I would like to have no way to create resources from 3party offers in Azure Marketplace. Microsoft services should be allowed.

1 answer

AnuragSingh-MSFT 21,251 Reputation points

2023-08-29T06:22:10.23+00:00

@Michal Anisko , thank you for posting this question.

If you would like to control the solutions which can be deployed from Marketplace, Private Azure Marketplace collections can help you.

You can create a private marketplace with no third-party solution added to it. Once it is enabled, the Microsoft services/solutions are by default enabled however no third-party solution is available for deployment.

Please follow the steps below to create private Azure marketplace - https://learn.microsoft.com/en-us/marketplace/create-manage-private-azure-marketplace-new

Hope this helps.

If the answer did not help, please add more context/follow-up question for it, and we will help you out. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.
Please sign in to rate this answer.
Michal Anisko 0 Reputation points

2023-08-29T08:28:17.5266667+00:00

I tried Private Azure Marketplace. It is very limited and haven't resolved my needs. My goal was to limit 3party for Sandbox mgmt group subscriptions.

I created new collection "Sandbox" with hope this will overwrite Default Collection scope

There is no assignment of new Private Marketplace collection to management group, only to subscription scope

If I allow "third party solution" to be used in Default Collection but NOT Sandbox - then "third party solution" could be created in every subscription anyway

AnuragSingh-MSFT 21,251 Reputation points

2023-08-30T07:40:08.0066667+00:00

Michal Anisko, thank you for the reply.

The Azure Private Marketpalce is at a tenant level setting; once enabled, it will set the policy for all users under the tenant.

In your case, there are options to have specific Private Marketplace (with the approved third-party solutions) to be applied to specific subscriptions. If you approve third-party solutions for a subscription and using another Private Marketplace disable it, the union of both wins the case - in this case the third-party solution is allowed.

Therefore, if you would like to disable "third-party" solution for all subscriptions under your tenant, disable the "default" marketplace and only enable the new "private marketplace created" OR just do not add any third-party solution in the default marketplace.

If there is a need to have a different policy for different subscriptions, please disable the default marketplace and create multiple private marketplaces for such a setting. Ensure that the subscriptions selected do not overlap, else you'll see the behavior as pointed out in the reply.

Hope this helps.

If the answer did not help, please add more context/follow-up question for it, and we will help you out. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.

Michal Anisko 0 Reputation points

2023-08-30T09:56:29.78+00:00

How about mgmt group scope for a collection like You wrote in documentation?

AnuragSingh-MSFT 21,251 Reputation points

2023-08-31T06:43:24.22+00:00

Michal Anisko, thank you for the feedback. Please give me some time to check with the team about it. It seems that "MG" should not have been here as it is scoped to subscriptions based on the doc here.

Michal Anisko 0 Reputation points

2023-08-31T09:28:40.66+00:00

It will be nice if I create new Collection scoped to my subscription so it will overwrite Default collection which is scoped to all subscriptions by default without ability to change it.

AnuragSingh-MSFT 21,251 Reputation points

2023-09-01T05:49:54.5333333+00:00

Michal Anisko, thank you for the reply. I will relay this feedback as well.

I have a question - where did you get the screenshot as posted above? For me, I see a slightly different text on the blade (which does not mention "Management Group") -

Michal Anisko 0 Reputation points

2023-09-01T06:24:02.1733333+00:00

From https://learn.microsoft.com/en-us/marketplace/create-manage-private-azure-marketplace-new

AnuragSingh-MSFT 21,251 Reputation points

2023-09-06T09:09:01.5666667+00:00

Michal Anisko, I have shared the feedback, and the doc will be updated soon. The private marketplace cannot be scoped to management group.

Michal Anisko 0 Reputation points

2023-09-06T10:09:14.7333333+00:00

Thank You
Sign in to comment

Share via

How to block 3party offers from Azure Marketplace for particular Management Groups or Subscriptions?

1 answer