This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 27%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAC%3C/text%3E%3C/svg%3E)
Hello,
Is there any command (PowerShell or AzCLI command) to get the Azure policy exception details ??
Thank you.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 39%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
@Az Cloud Learner Thanks for your comment. Can you please elaborate on your issue ? Are you looking for Azure Policy Exemption PowerShell commands?
Hello, I would like to fetch (get) the policy exception details from the PowerShell / CLI command...
Not to set the exception.
Example : If we have configured Allowed location policy, and we have enabled few locations to that... Based on request there we will exclusion to this policy for particular resource group or subscription.. Need to get the on what resource / resource group policy has excluded ( Not applied)
Hi,
Can you try:
$policy = Get-AzPolicyAssignment -Name <your policy name>
$policy.Properties.NotScopes
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Thank you. This works.. Need clarification on below query
Why Name is not accepting assignment name or policy name ?? Its not even policy ID, some random name, unable to get this name from the console..
Able to identify with help of policy description.
Any suggestion on this. ?
$policy = Get-AzPolicyAssignment -Name '2b085051b26850f0a4fc5e24'
Hi,
Name is not the display name but the name of the resource (the last part of resource id). Example
PS C:\Users\stas> Get-AzPolicyAssignment -Name storage-account-skus
Identity :
Location : westeurope
Name : storage-account-skus
ResourceId : /subscriptions/<sub id>/providers/Microsoft.Authorization/policyAssignments/storage-account-skus
ResourceName : storage-account-skus
ResourceGroupName :
ResourceType : Microsoft.Authorization/policyAssignments
SubscriptionId : <sub id>
Sku : @{name=A0; tier=Free}
PolicyAssignmentId : /subscriptions/<sub id>/providers/Microsoft.Authorization/policyAssignments/storage-account-skus
Properties : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.Policy.PsPolicyAssignmentProperties
With the policy assignments it might be good to provide the scope so you get policies that apply to that scope. Keep in mind that if you scope to subscription and you have policy assignments at management group where the sub is located you will get those policies as well.
If you want to search by display name you can do:
$policy = Get-AzPolicyAssignment | Where-Object { $_.Properties.DisplayName -eq 'some name'}
Keep in mind that the above does not cover new exemption feature that is in preview. Cmdlets for that one are not available yet.
Thank you for the help Stan. very good information.