Skip to content

Commit 29f5e23

Browse files
Merge pull request #250144 from shanhix1/patch-4
Clarified applicability logic
2 parents 5f97643 + 70b60b7 commit 29f5e23

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

articles/governance/policy/concepts/policy-applicability.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ Applicability is determined by several factors:
1414
- **Conditions** in the `if` block of the [policy rule](../concepts/definition-structure.md#policy-rule).
1515
- **Mode** of the policy definition.
1616
- **Excluded scopes** specified in the assignment.
17+
- **Resource selectors** specified in the assignment.
1718
- **Exemptions** of resources or resource hierarchies.
1819

1920
Condition(s) in the `if` block of the policy rule are evaluated for applicability in slightly different ways based on the effect.
@@ -34,7 +35,10 @@ Following are special cases to the previously described applicability logic:
3435
|Any invalid aliases in the `if` conditions |The policy isn't applicable |
3536
|When the `if` conditions consist of only `kind` conditions |The policy is applicable to all resources |
3637
|When the `if` conditions consist of only `name` conditions |The policy is applicable to all resources |
37-
|When the `if` conditions consist of only `type` and `kind` or `type` and `name` conditions |Only type conditions are considered when deciding applicability |
38+
|When the `if` conditions consist of only `type` and `kind` conditions |Only `type` conditions are considered when deciding applicability |
39+
|When the `if` conditions consist of only `type` and `name` conditions |Only `type` conditions are considered when deciding applicability |
40+
|When the `if` conditions consist of `type`, `kind`, and other conditions |Both `type` and `kind` conditions are considered when deciding applicability |
41+
|When the `if` conditions consist of `type`, `name`, and other conditions |Both `type` and `name` conditions are considered when deciding applicability |
3842
|When any conditions (including deployment parameters) include a `location` condition |Won't be applicable to subscriptions |
3943

4044
### AuditIfNotExists and DeployIfNotExists policy effects

0 commit comments

Comments
 (0)