Setting polices

[AB21805]

Hi all,

Which recourse can I assign polices too - Tenant Root Group, ManagementGroup, Subscription, RG, or VM 

Which ones can I exclude?

[#2 · Accepted solution]

You can assign an Azure Policy to the Tenant Root Group, another Management Group, a subscription, or a Resource Group.
You can exclude any individual resource, resource group, subscription, or Management group- basically any child resource or resource container of the scope.

Details here: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/scope

[#3]

@AB21805 

Azure policy will do:

Overview of Azure Policy - Azure Policy | Microsoft Learn