Azure resource graph query to get all policy definition details which are assigned
Azure has lot of inbuilt policies and few are custom policies.i need an Azure resource graph query to get all policy definition details of only the policies which are assigned
Azure Policy
Extract all the initiative (definition type) along with all the policy inside that initiative
Is there a way to extract all the initiative (definition type) along with all the policy inside that initiative? This could either be a separate script that outputs initiative and policies mapped against it or, if possible, integrated into the existing…
Azure Policy
how to fix "You must be in good standing" issue for azure
i can't sign in to my azure account. i have already given my student account for verification and it was verified successfully without any issue, but when i then get redirected to make the account on azure (sign up) , it asks for mobile number…
Azure Policy
list of the custom Permission is required to implement the Azure policy at management group level
i would like to create the custom role to implement the azure policy at management group level please let me know the required permissions to add in the custom IAM Role
Azure Policy
How do I rectify a disabled Azure Subscription?
My Azure Subscription 1 was disabled due to suspicious activity. To me, this was an error. How do I rectify this? Also, I can not access Support to create a Ticket to submit to the Security Team. Can you assist?
Azure Policy
Issue with Policy Enforcement on Storage Account Encryption
hello! I have an issue with the policy titled "Storage account encryption scopes should use customer-managed keys to encrypt data at rest" that I have enabled with "DENY" effect on my management group scope. Despite this policy…
Azure Policy
Exempt Azure policy for Users in specific AD group?
Hello, Is it possible to bypass Azure policy for specific AD users or AD groups while creating objects in AKS
Azure Kubernetes Service
Azure Policy
Access Denied / Locked out by Policy
I am the owner of subscription 4021f9f5-930c-4b71-a9b9-3b594634f5d3 and I accidentally applied an Azure Policy or access restriction that has revoked my own permissions, including access to create or view resource groups, policies, or role assignments. I…
Azure Policy
Generate Azure Policy Compliance Report with Display Name and Description Mapped for Policy Definitions
I am able to export Azure Policy compliance data using the Get-AzPolicyState command, but the resulting CSV only includes Policy ID or Policy Definition ID, not the associated Policy Display Name or Policy Description. For ease of use and to better…
Azure Policy
Autho failure after delete scope from assignment
Accidentally deleted the scope from the assignment table, which has deleted the admin access from the account. Unable to create a service request within azure portal. Posting here for any luck
Azure Policy
Azure policy rule with condition of contains from a params array
Is it possible to create a policy rule that use the contains function but receive an array? for example: block ip 1.1.1.1/32 from the security rule if the array of the params is ["1.1.1.1", "2.2.22"]
Azure Policy

Azure policy - IP Addresses range
Hi. I want to create an Azure Policy Definition that denies any NSG rule allowing inbound traffic from the source IP 1.2.3.4. Specifically, I want to block any NSG rule that permits traffic to any address range containing 1.2.3.4 using CIDR notation,…
Azure Policy
Azure policy for role assignments
Hi @Stanislav Zhelyazkov , i have a question: { "mode": "All", "policyRule": { TypeScriptCopy "if" Report a concern
Azure Policy
Best Approach for Denying Public Network Access on Managed Disks
An Azure policy has been implemented to disable public network access in audit mode. After remediating non-compliant resources, guidance is needed on the best approach to transition to deny mode, especially considering there are hundreds of new disks…
Azure Policy
azure policy - port range
Hi, I am working on creating an Azure policy rule to deny a specific port range. I came across this example policy: example And I would like to ask: In lines 55+56, how does the function that checks if false equals true ensure that the port range,…
Azure Policy
azure policy
I am attempting to create an Azure policy rule that denies inbound network traffic from the IP address 1.2.3.4 using the following JSON payload: However, when I try to create a new NSG rule that allows inbound traffic from the same IP address, the rule…
Azure Policy

DORA Regulations and Azure CSP (Reseller)
Hi team - we have customers asking us for DORA addendums in their Azure contracts - as they are in our CSP model, that would fall under the MCA framework - what is the guidance from Microsoft on that, has the MCA been updated so that it is fit for…
Azure Policy
Azure ARM policy to deny role assignments only for resource group owners not for admins and Sub owners
I have a requirement where I need to deny only owners of the resource group to do new role assignments or changes to existing role assignments. Resource group contributors and readers anyways cannot do any role assignments/modifications. Role…
Azure Role-based access control
Azure Policy
what happen if i upgrade to pay as you go?
what happen if i upgrade to pay as you go but i also have 200$ free credit. im still able to use 200$ free credit after i upgrade to pay as you go, or it will charge to my bank?
Azure Cost Management
Azure Policy
Unable to add application access policy: The remote name could not be resolved 'webdir.online.lync.com'
I am unable to add an application access policy to my organization due to the following error: I need an application access policy as my organization would like to use Microsoft Graph API and application access policy is needed for some of the APIs.