Azure Blueprint for deny assignment

viji.e 96 Reputation points
2021-05-21T08:39:59.187+00:00

Can you share how to do achieve deny assignment using Azure Blueprints, couldnt find the example specifically for deny assignments. This is needed to disable inheritance.

Azure Blueprints
Azure Blueprints
An Azure service that provides templates for quick, repeatable creation of fully governed cloud subscriptions.
72 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Swathi Dhanwada 18,781 Reputation points Microsoft Employee
    2021-06-03T05:18:03.293+00:00

    @vijje-3055 Here are the steps on how to achieve deny assignment using Azure Blueprints. To show deny assignment being added to Azure Blueprints, I will use existing built-in policy as an example.

    A. Select All services in the left pane. Search for and select Blueprints.
    B. Select Blueprint definitions from the page on the left and select the + Create blueprint button at the top of the page.

    101973-image.png

    C. Select Start with blank blueprint from the card at the top of the built-in blueprints list.
    D. Provide a Blueprint name such as testblueprint. (Use up to 48 letters and numbers, but no spaces or special characters).

    In the Definition location box, select the ellipsis on the right, select the management group or subscription where you want to save the blueprint, and choose Select.

    101916-image.png

    E. To add a policy assignment at the subscription level:

    • Select the + Add artifact row under the role assignment artifact.
    • Select Policy assignment for Artifact type.
    • Change Type to Built-in. In Search, enter Automation Account .
    • Change focus out of Search for the filtering to occur. Select Automation Account variables should be encrypted.

    Select Add to add this artifact to the blueprint.

    101943-image.png

    F. Select the artifact and uncheck the "This value should be specified when the blueprint is assigned". Then Change the effect to "Deny"

    101954-image.png

    G. Click on Save Draft.

    Note : To disable inheritance, it can be done by following this document or this document.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.