Get-AzPolicyStateSummary does not return compliant resource count, only noncompliant ones

[evanrappe]

Get-AzPolicyStateSummary does not return compliant resource count

Per the docs this is by design, but why?

For metric/KPI purposes it is required to know both compliant and noncompliant totals for a given assignment. The equivalent azcli command az policy state summarize returns both values, but PowerShell does not.

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @kenieva.

Issue Details

---

Get-AzPolicyStateSummary does not return compliant resource count

Per the docs this is by design, but why?

For metric/KPI purposes it is required to know both compliant and noncompliant totals for a given assignment. The equivalent azcli command az policy state summarize returns both values, but PowerShell does not.

Author:	bsod99
Assignees:	-
Labels:	Policy Insights, Service Attention, question, customer-reported
Milestone:	-

[dingmeng-xue]

Policy Insights team, please look into this feature question.

[kenieva]

Investigating...

[navba-MSFT]

@evanrappe Apologies for the late reply. Could you please use the Get-AzPolicyState cmdlet and test if that serves your requirement ?

Get-AzPolicyState -Filter "ComplianceState eq 'Compliant'"

Awaiting your reply.

[evanrappe]

@navba-MSFT I think with a bit of local filtering and counting I could get to where we needed for this, but it feels inefficient. It would be great if Get-AzPolicyStateSummary reported both compliant/noncompliant counts for a given assignment ID like az policy state summarize

Am I missing something, are these two not supposed to be equivalent commands?

[evanrappe]

My apologies -- been a while since I worked on this one. I believe the reason I had originally decided to use the "Summary" commands to get what I needed was because Get-AzPolicyState only outputs 1000 results, thus making filtering and counting with this command unusable for this case.

https://github.com/MicrosoftDocs/azure-docs/issues/26325