Skip to content

Commit 0fb551f

Browse files
committed
updates portal quickstart
1 parent 33ed8a6 commit 0fb551f

File tree

3 files changed

+16
-10
lines changed

3 files changed

+16
-10
lines changed

articles/governance/policy/assign-policy-portal.md

Lines changed: 16 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Quickstart: Create policy assignment using Azure portal"
33
description: In this quickstart, you create an Azure Policy assignment to identify non-compliant resources using Azure portal.
4-
ms.date: 02/29/2024
4+
ms.date: 07/03/2024
55
ms.topic: quickstart
66
---
77

@@ -23,11 +23,11 @@ In this quickstart, you create a policy assignment with a built-in policy defini
2323
1. Sign in to the [Azure portal](https://portal.azure.com).
2424
1. Search for _policy_ and select it from the list.
2525

26-
:::image type="content" source="./media/assign-policy-portal/search-policy.png" alt-text="Screenshot of the Azure portal to search for policy.":::
26+
:::image type="content" source="./media/assign-policy-portal/search-policy.png" alt-text="Screenshot of the Azure portal to search for policy." lightbox="./media/assign-policy-portal/search-policy.png":::
2727

2828
1. Select **Assignments** on the **Policy** pane.
2929

30-
:::image type="content" source="./media/assign-policy-portal/select-assignments.png" alt-text="Screenshot of the Assignments pane that highlights the option to Assign policy.":::
30+
:::image type="content" source="./media/assign-policy-portal/select-assignments.png" alt-text="Screenshot of the Assignments pane that highlights the option to Assign policy." lightbox="./media/assign-policy-portal/select-assignments.png":::
3131

3232
1. Select **Assign Policy** from the **Policy Assignments** pane.
3333

@@ -37,21 +37,27 @@ In this quickstart, you create a policy assignment with a built-in policy defini
3737
| ---- | ---- |
3838
| **Scope** | Use the ellipsis (`...`) and then select a subscription and a resource group. Then choose **Select** to apply the scope. |
3939
| **Exclusions** | Optional and isn't used in this example. |
40-
| **Policy definition** | Select the ellipsis to open the list of available definitions. |
41-
| **Available Definitions** | Search the policy definitions list for _Audit VMs that do not use managed disks_ definition, select the policy, and select **Add**. |
40+
| **Resource selectors** | Skip resource selectors for this example. Resource selectors let you refine the resources affected by the policy assignment. |
41+
| **Policy definition** | Select the ellipsis (`...`) to open the list of available definitions. |
42+
| **Available Definitions** | Search the policy definitions list for _Audit VMs that do not use managed disks_ definition, select the policy, and select **Add**. There's a column that shows the latest version of the definition. |
43+
| **Version (preview)** | Accept the version in format `1.*.*` to ingest major, minor, and patch versions. <br/><br/> Select the ellipsis (`...`) to view available versions and the options to enroll in minor version updates or preview versions. You must select a version to change the options. For more information, go to [definition version within assignment](./concepts/assignment-structure.md#policy-definition-id-and-version-preview). |
4244
| **Assignment name** | By default uses the name of the selected policy. You can change it but for this example, use the default name. |
4345
| **Description** | Optional to provide details about this policy assignment. |
4446
| **Policy enforcement** | Defaults to _Enabled_. For more information, go to [enforcement mode](./concepts/assignment-structure.md#enforcement-mode). |
45-
| **Assigned by** | Defaults to who is signed in to Azure. This field is optional and custom values can be entered. |
4647

47-
:::image type="content" source="./media/assign-policy-portal/select-available-definition.png" alt-text="Screenshot of filtering the available definitions.":::
48+
:::image type="content" source="./media/assign-policy-portal/select-available-definition.png" alt-text="Screenshot of the policy assignment and available definitions that highlights policy version." lightbox="./media/assign-policy-portal/select-available-definition.png":::
4849

49-
1. Select **Next** to view each tab for **Advanced**, **Parameters**, and **Remediation**. No changes are needed for this example.
50+
1. After a Policy definition is selected, you can change the **Version (preview)** options.
51+
52+
For example, if you select the options shown in the image, the **Version (preview)** is changed to `1.0.*`.
53+
54+
:::image type="content" source="./media/assign-policy-portal/select-version.png" alt-text="Screenshot of the policy definition version options to enroll in minor or preview versions." lightbox="./media/assign-policy-portal/select-version.png":::
55+
56+
1. Select **Next** to view each tab for **Parameters** and **Remediation**. No changes are needed for this example.
5057

5158
| Tab name | Options |
5259
| ---- | ---- |
53-
| **Advanced** | Includes options for [resource selectors](./concepts/assignment-structure.md#resource-selectors) and [overrides](./concepts/assignment-structure.md#overrides). |
54-
| **Parameters** | If the policy definition you selected on the **Basics** tab included parameters, they're configured on **Parameters** tab. This example doesn't use parameters. |
60+
| **Parameters** | If the policy definition you selected on the **Basics** tab has parameters, you configure them on the **Parameters** tab. This example doesn't use parameters. |
5561
| **Remediation** | You can create a managed identity. For this example, **Create a Managed Identity** is unchecked. <br><br> This box _must_ be checked when a policy or initiative includes a policy with either the [deployIfNotExists](./concepts/effects.md#deployifnotexists) or [modify](./concepts/effects.md#modify) effect. For more information, go to [managed identities](../../active-directory/managed-identities-azure-resources/overview.md) and [how remediation access control works](./how-to/remediate-resources.md#how-remediation-access-control-works). |
5662

5763
1. Select **Next** and on the **Non-compliance messages** tab create a **Non-compliance message** like _Virtual machines should use managed disks_.
24.3 KB
Loading
91.1 KB
Loading

0 commit comments

Comments
 (0)