Export the data of Policy Assignments Name, Type (Intiatives or Policy), Scope and then for each Policy Assignments I need the policy definitions Version, category, type associated with it and export in excel file
Hello Team, Can any one help on how I can Export the data of Policy Assignments Name, Type (Intiatives or Policy), Scope and then for each Policy Assignments I need the policy definitions Version, category, type associated with it and export in excel…
Azure Policy for Diagnostic Settings on Storage Accounts Not Affecting Table or Queue
I have an issue where I have set up these built-in policies to enable Diagnostic Settings on a storage account and its four subtypes. However, consistently, when I create a new Storage Account, it does not apply diagnostic settings to the Table or…
KQL query with regards to policies
Hi, I'm trying to do a KQL query using Azure Resource Graph on policyresources and I'm having difficulty producing an output/csv that will show the following table below. I need to show all policies including policies under an initiative in the…
How to prevent a normal user to see a subscription or cancel or add a subscription?
A regular user has access to some resource groups under a subscription. If users search "Subscription" in the Azure portal, they can see related subscriptions, and also they can "Cancel" or "Add" subscriptions. I'm unsure…
![](https://techprofile.blob.core.windows.net/images/fcf9081f1436440ebfb0f40a5584d388.png)
We have multiple Licenses I want to Implement Conditional Access Policy
Hello Everyone, We have multiple Licenses I want to Implement Security on all users. I created a Group, added all Company users to this group, and assigned a P1 license to this group. I want to Implement a Conditional Access policy to block all new users…
Graph query for accessing details of Azure storage, data management lifecycle policies
I'm trying to create a query that will retrieve the details of a lifecycle management policy held against our azure storage accounts and I'm struggling to find the right properties to retrieve the details I need. Firstly, is this possible using Graph and…
![](https://techprofile.blob.core.windows.net/images/VfQFAmOikEWfBHko2XlWTA.png?8D7F33)
Is it possible to deploy Azure VM extension for SAP solutions using Azure Policy?
Hi, I would like to deploy Azure VM extension for SAP solutions at scale with Azure Policy. I didn't found one, so I'm wondering if there is any blocker for creating such policy? Any Azure Policy limitations or any steps within SAP Extension deployment…
policy remediation script
Policy script for performing remediation in the azure platform.
![](https://techprofile.blob.core.windows.net/images/G-VX3fFD1EmsFje3zA3_Yw.png?8DC1D9)
Creating policy assignment failed
Creating policy assignment failed Creating policy assignment '[Preview]: Configure Azure Arc-enabled Windows machines with Log Analytics 'Visual Studio Enterprise Aboneliği - MPN SEYDI/AzureArcDemo' failed. Reason: Could not find a version of policy…
Azure policy does not work for resources created by Azure Databricks
I'm working on using a policy to automatically assign the sku.name tag to virtual machines created by Databricks. These tags are important for my team's cost management analysis. However, I discovered in another discussion that resources marked as…
Azure policy "deny" effect doesn't work for resources created by Azure DevOps or DataBricks
Hello, We have a policy with "Deny" effect when the newly created RG(resource group) doesn't have specific tag. Policy works fine when we try to create resources from arm/tf/portal (still the same api), but when we create the organization…
Readonly Tags in Resource Groups
How to keep the tags in Azure Resource Group as read-only. We have job which update tags based on external system every day, i dont want anyone manually update the tags which are added/updated by the Job. How do i do that. Currently we give contributor…
Require a tag and its value on resources
To Whom Can assist: Using the "Require a tag and its value on resources" policy, I am trying to enforce requiring Tags on resource groups and resources. However how can I create a custom policy that would ensure that I can have multiple…
How to remove the expired Azure Policy Exemption. Do we need to remove from Portal or Github first?
How to remove the expired Azure Policy Exemption. Do we need to remove from Portal or Github first? Which is best practice?
![](https://techprofile.blob.core.windows.net/images/wAnczKyrJEW-0tSusWUY8A.png?8D9C64)
Readonly Tags in Resource Groups
How to keep the tags in Azure Resource Group as read-only. We have job which update tags based on external system every day, i dont want anyone manually update the tags which are added/updated by the Job. How do i do that. Currently we give contributor…
How to correct RequestDisallowedByPolicy
Good Day I am trying to complete the course: Microsoft Azure AI Fundamentals: AI Overview, as I have an exam voucher that expires on 13 September. I have progressed to the second unit: Fundamentals of Machine Learning and I am now at the stage where I am…
Custom Policy for "Ensure Storage logging is Enabled for Blob Service for 'Read', 'Write', and 'Delete' requests" is not giving desired result
I have written below Custom Policy to check whether Audit logs are enabled or not for Blob Service. It is not working when i only enable the logs for blob service. My requirement is to check only for blob service. Not for whole Storage account. Below…
Can Azure Policy parse extension settings to evaluate existence condition & compliance?
Our requirement is to build an Azure Policy with Deploy If Not Exists effect to deploy/update an extension with certain settings. We are using the below existence condition of our custom policy. The issue is, upon assigning the policy, even after…
![](https://techprofile.blob.core.windows.net/images/Msdqv8JSVUmHlCh-fF5C9Q.png?8DC2BF)
How to create policy to deny direct user assignment to Privileged roles instead assigning roles via groups
I need to create a policy to deny direct user assignment to Entra privileged roles and force them to use groups instead for privileged role assignments.
Understanding Inconsistent data return for Azure Powershell command Get-AzPolicyDefinition
Hi, I'm encountering inconsistent data return for the Azure Powershell command Get-AzPolicyDefinition. I have a script that obtains compliance reports for Azure Policy Initiatives and I iterate over each compliance item to obtain more information. I'm…