How can I edit the built-in Azure policy definition?

Question

How can I edit the built-in Azure policy definition?

user20201 346

Hi All!

How can I edit the built-in policy definition in Azure policies? Is there a required permission or role to do that?

Accepted answer

0 additional answers

Your answer

Answer 1

Stanislav Zhelyazkov 27,791 MVP Volunteer Moderator

Hi,
Built-in policy definitions cannot be edited. Best thing it to duplicate the definition so you can create your own and use that one to do the assignment. You can remove the assignment for the built-in one.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

user20201 346 Reputation points

2021-01-26T10:52:59.273+00:00

Hello @Stanislav Zhelyazkov ! Thanks for your answer.

I would like to ask also, if I removed the assignment for the built-in one, are there any effects or impacts to the resources?
Stanislav Zhelyazkov 27,791 Reputation points MVP Volunteer Moderator

2021-01-26T10:56:37.903+00:00

No problem at all no matter the effect. If it is some deny or deplyIfNotExists policy it is best to create the new assignment and after that remove the old one. This is to assure no non-compliant resource gets deployed during that time. The new policy assignment will take some time until the compliance on the existing resources is scanned.
Stanislav Zhelyazkov 27,791 Reputation points MVP Volunteer Moderator

2021-01-26T10:58:03.763+00:00

Forgot to mention make sure that the modified policy works properly before fully replacing the built one. Simple thing as typo can be blocker.
user20201 346 Reputation points

2021-01-26T11:01:48.373+00:00

Great! Thanks for your help.

Share via

How can I edit the built-in Azure policy definition?

0 additional answers

Your answer