Soru

Zorluk: OrtaAzure Policy

An IT administrator needs to enforce multiple governance rules, such as restricting resource locations and requiring specific tags, across several Azure subscriptions. Can the administrator group these individual policy definitions into a single Azure Policy initiative and assign it at the management group level?

Cevap: Cevap

Cevap

Yes, the administrator can group the policy definitions into an initiative and assign it at the management group level.
Grouping multiple policy definitions into an initiative simplifies governance, and assigning the initiative at the management group scope ensures that it is inherited by all child subscriptions.

Adım Adım Çözüm

1
Evaluate the need to group multiple policy definitions.
Confirm that an Azure Policy initiative is a collection of policy definitions that are grouped to achieve a specific goal.
Using an initiative reduces administration overhead compared to managing individual policy assignments.
2
Determine if the initiative can be applied at the management group level.
Verify that Azure Policy assignments support scopes including management groups, subscriptions, and resource groups.
Assigning at the management group level allows all nested subscriptions and resource groups to inherit the policy settings automatically.

Anahtar Kavram

Azure Policy Initiatives and Assignment Scopes
Bu soruyu puanla