Azure Policy introduces user assigned MSI support, faster DINE deployment, and more!

Published Aug 26 2021 09:59 AM 2,592 Views
Microsoft

Azure Policy is excited to be rolling out some exciting new features! With these new capabilities, customers will be able to configure the deployment time of ARM templates via their DeployIfNotExists policies, use user-assigned MSI with their policy assignments, as well as group more policies in initiatives.  

 

Learn more about our new features below! 

 

User-Assigned Managed Identity 

 

Azure Policy now supports user-assigned managed identities! You cancreate a user-assigned managed identityand assign it to one or more of your policy assignments, offering easier management of managed identities and controlling access across the environment. 

 

Users can assign a user-assigned managed identity via REST API today, with Azure portal, PowerShell, and Azure CLI support coming shortly. 

 

 

 

{
    "location": "westus2",
    "identity": {
        "type": "UserAssigned",
        "userAssignedIdentities": {
            "/subscriptions/testSubscription/resourceGroups/testResourceGroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/test-msi": {}
        }
    },
    "properties": {
        "scope": "/subscriptions/testSubscription/resourcegroups/testResourceGroup",
        "displayName": "Test Policy User Assigned MSI",
        "enforcementMode": "Default",
        "policyDefinitionId": "/subscriptions/testSubscription/providers/Microsoft.Authorization/policyDefinitions/policyDefinitionId",
        "parameters": {}
    },
    "name": "TestPolicyWithUserAssignedMsi"
}

 

 

 

Here’s more information about user-assigned managed identities. 

 

DeployIfNotExist Latency Time 

 

AuditIfNotExists (AINE) and DeployIfNotExists (DINE) timing is now configurable within policy definitions!  

 

 

 

{
    "if": {
        "field": "type",
        "equals": "ResourceProviderTestHost/TestResourceTypeTwo"
    },
    "then": {
        "effect": "deployIfNotExists",
        "details": {
            "type": "ResourceProviderTestHost/TestResourceType",
            "evaluationDelay": "AfterProvisioning",
            "deployment": {
                "properties": {
                    "template": {
                        "$schema": https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#, 
                        "contentVersion": "1.0.0.0",
                        "resources": []
                    },
                    "mode": "Incremental"
                }
            }
        }
    }
}

 

 

 

Let’s say that you create and assign a DeployIfNotExists policy definition to your environment that deploys a private endpoint on any Azure Automation account. Now, instead of the private endpoint starting to deploy 10 minutes after creation of an Automation account, you can change the timing so the private endpoint deploys at the time that you choose, instead being limited to the default 10 minute delay.  

 

Instead, users are able to set one of the following options: 

  • AfterProvisioning 
  • AfterProvisioningSuccess 
  • AfterProvisioningFailure 
  • ISO 8601 duration between 0 and 360 minutes. 

 

AfterProvisioning values refer to the provisioning result of the resource that was evaluated in the policy rule's 'If’ condition. For example, AfterProvisioning runs after provisioning is complete, regardless of outcome.  

 

This does not affect remediation or existing resources as those evaluations always occur immediately. 

 

To use this new capability, you need to add the optional property ‘evaluationDelay’ to the details of your AINE and DINE policy definitions. 

 

To learn more about evaluationDelay, see DeployIfNotExists properties. 

 

Azure Policy initiative definitions increase support for 300 total parameter values 

 

Azure Policy initiative definitions enable users to group together related policy definitions to simplify assignments and management. Each initiative has an allowed number of parameters that users can define and apply to various policy definitions within a given initiative.  

 

Now, Azure Policy has increased the initiative parameter limit to 300.  This increases the amount of policy definitions that you can put in your initiative definitions and apply to your environment. Existing built-in initiative definitions also now have the capability to add more related policy definitions, becoming increasingly more robust and comprehensive. We hope that this update further improves ease of management of your environment with Azure Policy and provides a stronger compliance summary to our users.  

 

To learn more, see Azure Policy initiative definition structure. 

 

 

%3CLINGO-SUB%20id%3D%22lingo-sub-2661073%22%20slang%3D%22en-US%22%3EAzure%20Policy%20introduces%20user%20assigned%20MSI%20support%2C%20faster%20DINE%20deployment%2C%20and%20more!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2661073%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3EAzure%20Policy%26nbsp%3Bis%20excited%20to%20be%20rolling%20out%20some%20exciting%20new%20features!%26nbsp%3BWith%20these%20new%20capabilities%2C%20customers%26nbsp%3Bwill%20be%20able%26nbsp%3Bto%26nbsp%3Bconfigure%20the%26nbsp%3Bdeployment%20time%20of%26nbsp%3BARM%20templates%20via%26nbsp%3Btheir%26nbsp%3BDeployIfNotExists%20policies%2C%20use%26nbsp%3Buser-assigned%26nbsp%3BMSI%20with%20their%26nbsp%3Bpolicy%20assignments%2C%20as%20well%26nbsp%3Bas%26nbsp%3Bgroup%20more%20policies%20in%20initiatives.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3ELearn%20more%20about%20our%20new%20features%20below!%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3EUser-Assigned%20Managed%20Identity%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3E%E2%80%AF%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3EAzure%20Policy%20now%20supports%26nbsp%3B%3CSTRONG%3Euser-assigned%20managed%20identities%3C%2FSTRONG%3E!%20You%20can%3C%2FSPAN%3E%3CSPAN%20data-contrast%3D%22none%22%3E%E2%80%AF%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fmanaged-identities-azure-resources%2Fhow-to-manage-ua-identity-portal%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%20data-contrast%3D%22none%22%3Ecreate%20a%20user-assigned%20managed%20identity%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20data-contrast%3D%22none%22%3E%E2%80%AF%3C%2FSPAN%3E%3CSPAN%20data-contrast%3D%22none%22%3Eand%20assign%20it%20to%20one%20or%20more%20of%20your%20policy%20assignments%2C%20offering%20easier%20management%26nbsp%3Bof%26nbsp%3Bmanaged%20identities%20and%26nbsp%3Bcontrolling%26nbsp%3Baccess%26nbsp%3Bacross%20the%20environment.%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3EUsers%20can%20assign%20a%20user-assigned%26nbsp%3Bmanaged%20identity%26nbsp%3Bvia%26nbsp%3BREST%26nbsp%3BAPI%20today%2C%26nbsp%3Bwith%20Azure%26nbsp%3Bportal%2C%20PowerShell%2C%20and%26nbsp%3BAzure%26nbsp%3BCLI%20support%20coming%26nbsp%3Bshortly.%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-json%22%3E%3CCODE%3E%7B%0A%20%20%20%20%22location%22%3A%20%22westus2%22%2C%0A%20%20%20%20%22identity%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%22type%22%3A%20%22UserAssigned%22%2C%0A%20%20%20%20%20%20%20%20%22userAssignedIdentities%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%22%2Fsubscriptions%2FtestSubscription%2FresourceGroups%2FtestResourceGroup%2Fproviders%2FMicrosoft.ManagedIdentity%2FuserAssignedIdentities%2Ftest-msi%22%3A%20%7B%7D%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%2C%0A%20%20%20%20%22properties%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%22scope%22%3A%20%22%2Fsubscriptions%2FtestSubscription%2Fresourcegroups%2FtestResourceGroup%22%2C%0A%20%20%20%20%20%20%20%20%22displayName%22%3A%20%22Test%E2%80%AFPolicy%E2%80%AFUser%E2%80%AFAssigned%E2%80%AFMSI%22%2C%0A%20%20%20%20%20%20%20%20%22enforcementMode%22%3A%20%22Default%22%2C%0A%20%20%20%20%20%20%20%20%22policyDefinitionId%22%3A%20%22%2Fsubscriptions%2FtestSubscription%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2FpolicyDefinitionId%22%2C%0A%20%20%20%20%20%20%20%20%22parameters%22%3A%20%7B%7D%0A%20%20%20%20%7D%2C%0A%20%20%20%20%22name%22%3A%20%22TestPolicyWithUserAssignedMsi%22%0A%7D%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22TextRun%20SCXW26193352%20BCX0%22%20data-contrast%3D%22none%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW26193352%20BCX0%22%3EHere%E2%80%99s%20more%20information%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW26193352%20BCX0%22%3Eabout%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3CA%20class%3D%22Hyperlink%20SCXW26193352%20BCX0%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fmanaged-identities-azure-resources%2Foverview%22%20target%3D%22_blank%22%20rel%3D%22noreferrer%20noopener%22%3E%3CSPAN%20class%3D%22TextRun%20Underlined%20SCXW26193352%20BCX0%22%20data-contrast%3D%22none%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW26193352%20BCX0%22%20data-ccp-charstyle%3D%22Hyperlink%22%3Euser-assigned%20managed%20identities%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20class%3D%22TextRun%20SCXW26193352%20BCX0%22%20data-contrast%3D%22auto%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW26193352%20BCX0%22%3E.%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22EOP%20SCXW26193352%20BCX0%22%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A259%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3EDeployIfNotExist%26nbsp%3BLatency%20Time%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3E%E2%80%AF%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3EAuditIfNotExists%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3E%26nbsp%3B(AINE)%26nbsp%3Band%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3EDeployIfNotExists%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3E%26nbsp%3B(DINE)%26nbsp%3Btiming%26nbsp%3Bis%26nbsp%3Bnow%20configurable%20within%20policy%26nbsp%3Bdefinitions!%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-json%22%3E%3CCODE%3E%7B%0A%20%20%20%20%22if%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%22field%22%3A%20%22type%22%2C%0A%20%20%20%20%20%20%20%20%22equals%22%3A%20%22ResourceProviderTestHost%2FTestResourceTypeTwo%22%0A%20%20%20%20%7D%2C%0A%20%20%20%20%22then%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%22effect%22%3A%20%22deployIfNotExists%22%2C%0A%20%20%20%20%20%20%20%20%22details%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%22type%22%3A%20%22ResourceProviderTestHost%2FTestResourceType%22%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20%22evaluationDelay%22%3A%20%22AfterProvisioning%22%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20%22deployment%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%22properties%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%22template%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%22%24schema%22%3A%E2%80%AFhttps%3A%2F%2Fschema.management.azure.com%2Fschemas%2F2015-01-01%2FdeploymentTemplate.json%23%2C%20%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%22contentVersion%22%3A%20%221.0.0.0%22%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%22resources%22%3A%20%5B%5D%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%22mode%22%3A%20%22Incremental%22%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%0A%7D%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3ELet%E2%80%99s%20say%20that%20you%26nbsp%3Bcreate%20and%26nbsp%3Bassign%26nbsp%3Ba%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3EDeployIfNotExists%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3E%26nbsp%3Bpolicy%26nbsp%3Bdefinition%26nbsp%3Bto%20your%20environment%20that%20deploys%20a%20private%20endpoint%20on%20any%26nbsp%3BAzure%20Automation%20account.%20Now%2C%20instead%20of%20the%20private%20endpoint%20starting%20to%20deploy%2010%20minutes%20after%20creation%20of%20an%20Automation%20account%2C%20you%20can%20change%20the%26nbsp%3Btiming%26nbsp%3Bso%20the%20private%20endpoint%26nbsp%3Bdeploys%26nbsp%3Bat%20the%20time%20that%20you%20choose%2C%20instead%20being%26nbsp%3Blimited%20to%20the%20default%26nbsp%3B10%20minute%26nbsp%3Bdelay.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3EInstead%2C%20users%26nbsp%3Bare%26nbsp%3Bable%20to%26nbsp%3Bset%26nbsp%3Bone%20of%26nbsp%3Bthe%20following%20options%3A%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20data-leveltext%3D%22-%22%20data-font%3D%22Calibri%22%20data-listid%3D%2210%22%20aria-setsize%3D%22-1%22%20data-aria-posinset%3D%221%22%20data-aria-level%3D%221%22%3E%3CSPAN%20data-contrast%3D%22none%22%3EAfterProvisioning%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%20data-leveltext%3D%22-%22%20data-font%3D%22Calibri%22%20data-listid%3D%2210%22%20aria-setsize%3D%22-1%22%20data-aria-posinset%3D%222%22%20data-aria-level%3D%221%22%3E%3CSPAN%20data-contrast%3D%22none%22%3EAfterProvisioningSuccess%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%20data-leveltext%3D%22-%22%20data-font%3D%22Calibri%22%20data-listid%3D%2210%22%20aria-setsize%3D%22-1%22%20data-aria-posinset%3D%223%22%20data-aria-level%3D%221%22%3E%3CSPAN%20data-contrast%3D%22none%22%3EAfterProvisioningFailure%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%20data-leveltext%3D%22-%22%20data-font%3D%22Calibri%22%20data-listid%3D%2210%22%20aria-setsize%3D%22-1%22%20data-aria-posinset%3D%223%22%20data-aria-level%3D%221%22%3E%3CSPAN%20data-contrast%3D%22none%22%3EISO%208601%20duration%20between%200%20and%20360%20minutes.%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A259%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CI%3E%3CSPAN%20data-contrast%3D%22none%22%3EAfterProvisioning%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20data-contrast%3D%22none%22%3Evalues%26nbsp%3Brefer%20to%26nbsp%3Bthe%20provisioning%20result%20of%20the%20resource%20that%20was%20evaluated%20in%20the%20policy%26nbsp%3Brule's%26nbsp%3B'If%E2%80%99%26nbsp%3Bcondition.%26nbsp%3BFor%20example%2C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CI%3EAfterProvisioning%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20data-contrast%3D%22none%22%3E%26nbsp%3Bruns%20after%20provisioning%20is%20complete%2C%20regardless%20of%20outcome.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A259%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3EThis%20does%20not%20affect%20remediation%20or%26nbsp%3Bexisting%26nbsp%3Bresources%26nbsp%3Bas%20those%20evaluations%26nbsp%3Balways%26nbsp%3Boccur%20immediately.%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3ETo%20use%20this%20new%20capability%2C%20you%20need%20to%20add%20the%20optional%20property%20%E2%80%98%3C%2FSPAN%3E%3CSPAN%3E%3CSTRONG%3EevaluationDelay%3C%2FSTRONG%3E%3C%2FSPAN%3E%3CSPAN%20data-contrast%3D%22none%22%3E%E2%80%99%20to%20the%20details%20of%20your%20AINE%20and%20DINE%26nbsp%3Bpolicy%20definitions.%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3ETo%20learn%20more%26nbsp%3Babout%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3EevaluationDelay%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3E%2C%20see%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EDeployIfNotExists%26nbsp%3Bproperties%3C%2FSPAN%3E%3CSPAN%20data-contrast%3D%22none%22%3E.%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3E%E2%80%AF%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20data-contrast%3D%22none%22%3EAzure%26nbsp%3BPolicy%26nbsp%3Binitiative%26nbsp%3Bdefinitions%26nbsp%3Bincrease%26nbsp%3Bsupport%26nbsp%3Bfor%26nbsp%3B300%26nbsp%3Btotal%26nbsp%3Bparameter%20values%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3EAzure%26nbsp%3BPolicy%26nbsp%3Binitiative%26nbsp%3Bdefinitions%20enable%20users%20to%20group%20together%20related%20policy%20definitions%20to%20simplify%20assignments%20and%20management.%20Each%20initiative%20has%20an%26nbsp%3Ballowed%20number%20of%20parameters%20that%20users%20can%20define%20and%20apply%20to%20various%20policy%20definitions%20within%20a%20given%20initiative.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3ENow%2C%26nbsp%3BAzure%20Policy%26nbsp%3Bhas%20increased%26nbsp%3Bthe%26nbsp%3Binitiative%26nbsp%3Bparameter%26nbsp%3Blimit%20to%20300.%26nbsp%3B%26nbsp%3BThis%26nbsp%3Bincreases%26nbsp%3Bthe%20amount%20of%20policy%20definitions%20that%20you%26nbsp%3Bcan%26nbsp%3Bput%20in%20your%20initiative%26nbsp%3Bdefinitions%20and%20apply%20to%20your%20environment.%26nbsp%3BExisting%20built-in%20initiative%26nbsp%3Bdefinitions%26nbsp%3Balso%26nbsp%3Bnow%26nbsp%3Bhave%20the%20capability%20to%20add%20more%20related%20policy%26nbsp%3Bdefinitions%2C%20becoming%20increasingly%20more%20robust%20and%20comprehensive.%26nbsp%3BWe%20hope%20that%20this%20update%26nbsp%3Bfurther%20improves%26nbsp%3Bease%20of%20management%20of%20your%26nbsp%3Benvironment%20with%26nbsp%3BAzure%26nbsp%3BPolicy%26nbsp%3Band%20provides%26nbsp%3Ba%20stronger%20compliance%20summary%20to%20our%20users.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3ETo%20learn%20more%2C%20see%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fgovernance%2Fpolicy%2Fconcepts%2Finitiative-definition-structure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3EAzure%20Policy%20initiative%20definition%20structure%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20data-contrast%3D%22none%22%3E.%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-contrast%3D%22none%22%3E%E2%80%AF%3C%2FSPAN%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A259%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2661073%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22TextRun%20SCXW178277387%20BCX0%22%20data-contrast%3D%22none%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3EAzure%20Policy%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Eis%20excited%20to%20be%20rolling%20out%20some%20exciting%20new%20features!%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3EWith%20these%20new%20capabilities%2C%20customers%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Ecan%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Econfigure%20the%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Edeploy%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Ement%20time%20of%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3EAz%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Eure%20Resource%20Manager%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Etemplates%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E(%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3EARM%20templates%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E)%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Evia%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Etheir%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22TextRun%20SCXW178277387%20BCX0%22%20data-contrast%3D%22none%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3EDeployIfNotExists%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22TextRun%20SCXW178277387%20BCX0%22%20data-contrast%3D%22none%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Epolicy%20definitions%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%2C%20use%20user-assigned%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Emanaged%20identities%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Ewith%20their%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Epolicy%20assignments%2C%20a%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Es%20well%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Ea%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Es%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Egroup%20more%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Epolicy%20definitions%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Ein%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Eto%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Einitiative%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3Es%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E.%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW178277387%20BCX0%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22EOP%20SCXW178277387%20BCX0%22%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22EOP%20SCXW178277387%20BCX0%22%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%3CSPAN%20class%3D%22TextRun%20SCXW195095987%20BCX0%22%20data-contrast%3D%22none%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW195095987%20BCX0%22%3ELearn%20more%20about%20our%20new%20features%20below!%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22EOP%20SCXW195095987%20BCX0%22%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A160%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2661073%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGovernance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPolicy%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Aug 26 2021 09:59 AM
Updated by: