MicrosoftHello, Heinrich_Gantenbein
I consider as inconsistent this part of this article "Policy Assignment must be at this level or lower. They should be at the highest MG group possible. Do NOT assign Policies to subscriptions or resource groups." with the note "This is the most streamlined approach for creating a remediation task and is supported for policies assigned on a subscription. For policies assigned on a management group, remediation tasks should be created using https://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources?tabs=azure-portal#option-1-create-a-remediation-task-from-the-remediation-page or https://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources?tabs=azure-portal#option-2-create-a-remediation-task-from-a-non-compliant-policy-assignment after evaluation has determined resource compliance." at the article https://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources?tabs=azure-portal
As for this last article, if we create a remediation task as a part of the policy assignment creation, and assign it to a MG, the remediation task is not effectively created, and we have to create it from the Remediation section afterwards.
Could you please clarify?
Thanks
Best regards
