Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
803 questions
1 answer
Requiring Tags
I need to force tags on all Azure resources, namely cost center and department codes. And as you might expect both those are dynamic and can change for each resource so its impossible to programmatically assign them through policies. So, here's my…
asked 2021-02-25T19:59:43.33+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 8%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETP%3C/text%3E%3C/svg%3E)
Tony Price
1
Reputation point
answered 2021-03-23T16:49:29.43+00:00
olufemia-MSFT
2,861
Reputation points
1 answer
App Tracking Transparency updates for iOS 14.5
Hi, Apple will release new iOS 14.5 and there will be several changes to user privacy and data use. I use Application Insights to gather analytics information from the app. I want to know does Microsoft use any user or device data information which…
asked 2021-03-04T15:48:49.54+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
commented 2021-03-16T21:58:23.967+00:00
bharathn-msft
5,086
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure Policy on Azure Stack Hub
Is Azure Policy supported on Azure Stack Hub? I'm trying to apply a policy using this data: { "policies": [ { "name": "enforceAllowedVMImages", "description": "Policy to…
asked 2021-02-26T05:12:28.77+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 42%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJC%3C/text%3E%3C/svg%3E)
James Churches
96
Reputation points
commented 2021-03-11T03:19:30.423+00:00
bharathn-msft
5,086
Reputation points Microsoft Employee
1 answer
Is there an Azure Policy generator
Is there a GUI tool for generating Azure policies something similar to AWS Policy Generator.
asked 2021-03-09T14:51:47.433+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 75%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESW%3C/text%3E%3C/svg%3E)
Sam White
6
Reputation points
answered 2021-03-10T18:52:45.837+00:00
Kenieva-MSFT
161
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Alert for Azure Policy Definition and Assignment Changes
I have an assigned policy in my subscription with Deny mode. However, somebody in my team keep changing this back to Audit. In another instance, my azure policy definition is also changed. Is there a way I can see who changed my policy definition and…
asked 2021-03-01T14:43:57.047+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 94%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYF%3C/text%3E%3C/svg%3E)
Yasmin, Fitri
266
Reputation points
accepted 2021-03-08T10:04:58.28+00:00
Yasmin, Fitri
266
Reputation points
2 answers
Azure policy looking for a specific tag on vnets and then deploying a virtual wan hub connection to that vnet
I have managet to create a policy with a rule which searches for all vnets containing a specific tag. If it finds a vnet with this tag it should do a template deployment where it creates a virtual wan hub connection to that vnet. The virtual Wan is in a…
asked 2021-03-02T12:55:26.67+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 28.999999999999996%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Thomas Stubergh
1
Reputation point
answered 2021-03-08T07:45:55.273+00:00
Thomas Stubergh
1
Reputation point
1 answer
One of the answers was accepted by the question author.
How to create a policy to set MaxInactiveTime and MaxAgeMultiFactor of refresh tokens for a particular application
I want to set MaxAgeMultiFactor to until-revoked and MaxInactiveTime to 30 days of a refresh tokens which generated against a particular app. I was following the below two documentations. …
asked 2021-02-16T10:03:36.667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 6%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYP%3C/text%3E%3C/svg%3E)
Yasitha Pandithawatta
141
Reputation points
accepted 2021-03-01T03:59:03.897+00:00
Yasitha Pandithawatta
141
Reputation points
0 answers
Get-AzPolicyAssignment does not retrieve parameters assigned with Default Value
I tried to get policy assignment using powershell with Get-AzPolicyAssignment. Then, I tried to get the list of parameters by using $PolicyAssignment.Properties.Paramaters. However, this is only returns parameter with user defined parameters. I have…
asked 2021-02-17T12:05:46.933+00:00
Yasmin, Fitri
266
Reputation points
commented 2021-02-26T10:09:35.02+00:00
Yasmin, Fitri
266
Reputation points
1 answer
Issue while redeming Azure Pass
Hi Guys, Today i tried to redeem my azure pass form the portal https://www.microsoftazurepass.com/ . I have followed their instructions and the pass got redeemed but it doesent redirect to the step 2 where we can create the subscription. when i go to…
asked 2021-02-24T11:44:33.307+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 87%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sebastian Peter
6
Reputation points
answered 2021-02-24T12:58:19.283+00:00
SadiqhAhmed-MSFT
38,891
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Is there any way to exclude few resource groups from subscription level lock in azure
Is there any way to exclude few resource groups from subscription level lock in azure . I have an azure donotdelete lock scoped at subscription level i want to exclude few resourcegroups from it in azure . I do not find any direct way for it other than…
asked 2021-02-15T06:59:50.55+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 74%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Abhishek Singh
381
Reputation points
accepted 2021-02-16T08:03:11.54+00:00
Abhishek Singh
381
Reputation points
1 answer
Azure Policies - Redis Cache preview feature private endpoints
Writing a policy for Azure Redis Cache, for private endpoints, seems the aliases are not available for querying even though they are listed when running an get-azpolicyalias command. Is this because the private endpoints feature is still under review?…
asked 2021-02-12T20:19:07.34+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 85%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
amc3280
1
Reputation point
answered 2021-02-15T09:30:16.957+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 10%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
KalyanChanumolu-MSFT
8,316
Reputation points
1 answer
How to add the Azure Active Directory Administrator on a SQL Server to an Azure group once the SQL server deploys
I am trying to create an automated process that adds the Azure Active Directory on a SQL Server to an Azure group once the SQL server deploys. The group I want to add too is a security group. I am thinking about using Azure policy to implement this. What…
asked 2021-02-09T03:36:49.423+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 65%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDO%3C/text%3E%3C/svg%3E)
Dimeji Olayinka
37
Reputation points
answered 2021-02-12T20:48:04.033+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 39%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
SwathiDhanwada-MSFT
17,881
Reputation points
1 answer
One of the answers was accepted by the question author.
Azure Security Center Security Policy
Hello Guys, I have one question about Azure Security Center. The Security Policy in Security Center has a cost ? I understand this Security Policy is just a policy that show more recommendations and details in Security Center, but I don't know…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 57.00000000000001%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
How to determine if my company is using the gov cloud or the global cloud?
I am working on our organizations compliance status and trying to determine which version of Azure and O365 we purchased. We should be using the Gov cloud option but I'm not sure how to tell. Thanks.
asked 2021-02-08T19:25:43.433+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 45%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPW%3C/text%3E%3C/svg%3E)
Paul Waters
21
Reputation points
accepted 2021-02-09T13:30:00.94+00:00
Paul Waters
21
Reputation points
1 answer
Exercise - Create a website hosted in Azure for TradeWinds
I'm receiving an error on Question 7 of the following Exercise link: https://learn.microsoft.com/en-us/learn/modules/azure-architecture-fundamentals/exercise-create-website I did select 'MySQL in App' and see Database Provider, but receiving…
asked 2021-01-27T20:37:48.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 38%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERE%3C/text%3E%3C/svg%3E)
Rebecca E. Boleratz
1
Reputation point
answered 2021-02-05T21:27:25.957+00:00
olufemia-MSFT
2,861
Reputation points
1 answer
At azure account Multiple users for single billing
Is that possible to create a multiple sub users for an single azure account and single billing credentials
asked 2021-01-21T06:11:18.29+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 28.999999999999996%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETT%3C/text%3E%3C/svg%3E)
TAURUS The BULL
1
Reputation point
answered 2021-02-03T15:00:41.617+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 43%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Monalla-MSFT
12,046
Reputation points
1 answer
unable to access Azure Student free subscription?
I am pursuing a Master's Degree. I need an Azure portal for free. I cannot afford to pay such a high amount. My college id is not accepted in azure for the student portal and the other options are also not giving access to work free. Please help me out…
asked 2021-02-03T07:30:45.633+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 4%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPL%3C/text%3E%3C/svg%3E)
Piyush Lanjewar
1
Reputation point
answered 2021-02-03T12:54:36.02+00:00
SadiqhAhmed-MSFT
38,891
Reputation points Microsoft Employee
2 answers
DIfferent AAD pwd expiry policy for specific Azure Cloud only users
Is there a way to set a different pwd expiry policy for a specific user or a group of users? Standard global policy is 90 days, we want our Dev User Group to have a pwd expiry policy as 180 days. These are all cloud users on the O365 platform. Any help…
asked 2021-02-03T09:46:19.917+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 34%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMF%3C/text%3E%3C/svg%3E)
Mohammed Feroze Khan
1
Reputation point
commented 2021-02-03T12:48:16.097+00:00
Vasil Michev
96,836
Reputation points MVP
1 answer
One of the answers was accepted by the question author.
Limit Resource Provider in Azure Policy
I tried to limit the allowed resource type based on their providers using Azure Policy. For example, I want to allowed all resources from Microsoft.Compute. The built-in 'Allowed resource types' is inefficient because I have to list all of possible…
asked 2021-02-02T13:13:04.387+00:00
Yasmin, Fitri
266
Reputation points
commented 2021-02-02T14:29:23.053+00:00
Stanislav Zhelyazkov
21,506
Reputation points MVP
1 answer
Apply exclusion to policy or initiative based on resource region
Hi, I am configuring resource diagnostic settings via policies within initiatives. The diagnostic settings will be configured to send to log analytics workspace and storage account in the same region as the resource. We deploy across four regions…
asked 2021-01-28T22:07:49.033+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 27%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDP%3C/text%3E%3C/svg%3E)
Dan Pier
1
Reputation point
commented 2021-02-02T09:54:56.9+00:00
tbgangav-MSFT
10,386
Reputation points