I need to assign a policy to the tenant root management group from a new user account.

Question

what is the role needed for the user? How to do it?

Answer 1

Hi @Linares Carramolino, Maria Concepción

Thank you for posting this in Microsoft Q&A.

I understand you want to assign a policy to the tenant root management group from a new user account.

At least one of the roles - Owner, Resource Policy Contributor, or User Access Administrator must be assigned to the user account in order to assign policies to the tenant root management group.

For your reference: https://learn.microsoft.com/en-us/azure/governance/management-groups/overview#management-group-access

To Assign a policy to the tenant root management group follow the steps which mentioned in this document: https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage#assign-a-policy

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If the answer is helpful, please click "Accept Answer" and kindly "upvote" it.

Answer 2

Hi there Linares Carramolino, Maria Concepción

Thats a good question and thanks for using QandA platform

So to assign a policy to the tenant root management group in Azure, you'll need the appropriate role assignment. Typically, the role required to manage policies at the tenant root management group level is the "Owner" role or a custom role with permissions to manage policies.

Once the user account has been assigned the appropriate role (e.g., "Owner"), they will have the necessary permissions to manage policies at the tenant root management group level.

Now, to actually assign a policy to the tenant root management group, the user with the assigned role can follow these steps:

1. Navigate to the Azure Policy blade in the Azure portal.
2. Select "Assignments" from the left-hand menu.
3. Click on "Assign policy" to create a new policy assignment.
4. Choose the scope as the tenant root management group.
5. Select the desired policy definition and configure any parameters or conditions.
6. Review and confirm the assignment.

If this helps kindly accept the answer thanks much.