Question

Difficulty: MediumAzure Policy

An IT administrator needs to enforce multiple governance rules, such as restricting resource locations and requiring specific tags, across several Azure subscriptions. Can the administrator group these individual policy definitions into a single Azure Policy initiative and assign it at the management group level?

Answer: Answer

Answer

Yes, the administrator can group the policy definitions into an initiative and assign it at the management group level.
Grouping multiple policy definitions into an initiative simplifies governance, and assigning the initiative at the management group scope ensures that it is inherited by all child subscriptions.

Step-by-Step Solution

1
Evaluate the need to group multiple policy definitions.
Confirm that an Azure Policy initiative is a collection of policy definitions that are grouped to achieve a specific goal.
Using an initiative reduces administration overhead compared to managing individual policy assignments.
2
Determine if the initiative can be applied at the management group level.
Verify that Azure Policy assignments support scopes including management groups, subscriptions, and resource groups.
Assigning at the management group level allows all nested subscriptions and resource groups to inherit the policy settings automatically.

Key Concept

Azure Policy Initiatives and Assignment Scopes
Rate this question