Microsoft Azure - Create a Custom Policy Initiative in Azure

Microsoft Azure – Add Assignment to Custom Policy Initiative

Last Updated : 30 Mar, 2023

In this article, we will add an assignment to an already existing custom policy initiative definition using azure PowerShell commands. Here policy assignment is a kind of instructions to apply or stop the action of policies on Azure resources. We can restrict a few executions, update, creations, modifications by applying the policy assignments to select scope or resource. Few policy assignments require default parameters, this should be sorted before applying the assignment to scope.

Implementation:

Use the following command to verify the policy Initiative definition

Get-AzPolicySetDefinition `
| Where-Object { $_.Properties.displayname -eq "<add_policy_initiative_name>" }

Example:

Get-AzPolicySetDefinition `
| Where-Object { $_.Properties.displayname -eq "Azure Custom Policy Initiative Definition" }

Then, store policy Initiative definition to variable let’s say “$initiative”

$initiative = Get-AzPolicySetDefinition `
| Where-Object { $_.Properties.displayname -eq "<add_policy_initiative_name>" }

Example:

$initiative = Get-AzPolicySetDefinition `
| Where-Object { $_.Properties.displayname -eq "Azure Custom Policy Initiative Definition" }

Get scope in which you want to assign:

If your scope is resource group, then use this below command:

$scope = (Get-AzResourceGroup -Name '<add_resource_group_name>').resourceid

use this below command to verify your select resource id :

$scope.resourceid

If your scope is tenant, then use this below command:

$scope = (Get-AzTenant).Id

Now, add Assignment to an Initiative definition on a select scope

New-AzPolicyAssignment `
-Name 'Initiative-Assignment-01' -PolicySetDefinition $initiative -Scope $scope

Output:

That’s it!. The assignment to a Custom Policy Initiative is done.

Microsoft Azure - Create a Custom Policy Initiative in Azure

jaysurya9

Improve

Article Tags :

Similar Reads

Microsoft Azure - Create a Custom Policy Initiative in Azure

Here in this article, we'll see how we can create an Azure Custom Policy Initiative using Azure Portal. Before getting started let's know about Custom Initiative. What is Azure Policy Initiative Definition? An initiative definition is a collection of policy definitions that are grouped towards achie

Microsoft Azure - Export Policy Assignments

Pre-requisite: Azure In this article, we will show you how to export the azure policy assignments from a select Azure Subscription from the Azure Cloud Shell with the help of Azure PowerShell run commands. To export the list of azure policy assignments one should require the RBAC reader access role

Microsoft Azure - Creating Custom Policy Initiative using PowerShell

In this article we'll see how we can create an Azure Custom Policy Initiative Definition with a JSON file using the Azure PowerShell commands in simple easy steps. What is Custom Policy Initiative Definition? Custom Policy Initiative is a collection or group of policy definitions that are grouped to

Microsoft Azure - Get Azure Policies Definitions and Policy Initiatives Definitions

In this article, we will be using some Azure PowerShell Commands either in Azure Cloud Shell or in Azure PowerShell ISE in Admin mode to get the details and properties about the Azure Policies. Let's get started. 1. Use the Get-AzPolicyStateSummary PowerShell command to get the details of the azure

Microsoft Azure - Assigning Tags to a Azure VM

In this article, we will look into the process of assigning tags to an Azure VM using the Azure PowerShell commands. You can perform the commands in Azure Cloud Shell or Use can use Windows PowerShell to run the commands. Before Assigning the Tags to Azure Virtual Machine, You can check which are as

Microsoft Azure - Create Alert For Conditional Access Policy Changes

In this article, we will look into the process of creating an alert for Conditional Access Policy Changes. Conditional Access brings signals together, to make decisions, and enforce organizational policies. This alert detects :Creation of a New Conditional Access Policy,Deletion of a Conditional Acc

Microsoft Azure - Adding Data to Azure Container

Pre-requisite: Azure Blob Versioning A text and binary data object store with huge scalability. support for big data analytics and the addition of media, such as photographs and videos. An object storage option for the cloud is Azure Blob Storage. It can hold enormous volumes of textual or binary da

Microsoft Azure - Create and Assign Policy for "Not Allowed Resource Types"

Pre-requisite: Azure In this article, we will show you how to deny the resource creation of your choice on azure subscriptions or management groups by implementing a rule policy. By implementing this policy on the specific subscription you can restrict your subscription users to create unwanted reso

Microsoft Azure - Add Storage Blob Owner Role Assignment For Azure AD User

In this article, you will see how you can add Storage Blob Owner role assignment for active directory users for granting permissions to operate on the storage account level and to grant permissions to other users within the storage account level. The main purpose of Storage Blob Data Owner is it all

Microsoft Azure - Creating JSON Snippet For Policy Initiative Creation using CSV File

Here in this article, we are going to create a custom JSON script by using the data filled in the CSV file for automation. What we are going to do is first we'll convert a list of given Policy IDs from CSV to JSON Code Snippet as a prerequisite for creating a custom policy initiative definition for