@@ -3,6 +3,7 @@ title: Overview of Azure Policy
3
3
description : Azure Policy is a service in Azure, that you use to create, assign and, manage policy definitions in your Azure environment.
4
4
ms.date : 11/25/2019
5
5
ms.topic : overview
6
+ ms.custom : fasttrack-edit
6
7
---
7
8
# What is Azure Policy?
8
9
@@ -90,11 +91,11 @@ To learn more about the structures of policy definitions, review
90
91
## Policy assignment
91
92
92
93
A policy assignment is a policy definition that has been assigned to take place within a specific
93
- scope. This scope could range from a [ management group] ( ../management-groups/overview.md ) to a
94
- resource group . The term * scope* refers to all the resource groups, subscriptions, or management
95
- groups that the policy definition is assigned to. Policy assignments are inherited by all child
96
- resources. This design means that a policy applied to a resource group is also applied to resources
97
- in that resource group. However, you can exclude a subscope from the policy assignment.
94
+ scope. This scope could range from a [ management group] ( ../management-groups/overview.md ) to an
95
+ individual resource . The term * scope* refers to all the resources, resource groups, subscriptions,
96
+ or management groups that the policy definition is assigned to. Policy assignments are inherited
97
+ by all child resources. This design means that a policy applied to a resource group is also applied
98
+ to resources in that resource group. However, you can exclude a subscope from the policy assignment.
98
99
99
100
For example, at the subscription scope, you can assign a policy that prevents the creation of
100
101
networking resources. You could exclude a resource group in that subscription that is intended for
@@ -155,7 +156,7 @@ Under this initiative, you would have policy definitions such as:
155
156
156
157
Like a policy assignment, an initiative assignment is an initiative definition assigned to a
157
158
specific scope. Initiative assignments reduce the need to make several initiative definitions for
158
- each scope. This scope could also range from a management group to a resource group .
159
+ each scope. This scope could also range from a management group to an individual resource .
159
160
160
161
Each initiative is assignable to different scopes. One initiative can be assigned to both
161
162
** subscriptionA** and ** subscriptionB** .
@@ -234,4 +235,4 @@ next steps:
234
235
235
236
- [ Assign a policy definition using the portal] ( ./assign-policy-portal.md ) .
236
237
- [ Assign a policy definition using the Azure CLI] ( ./assign-policy-azurecli.md ) .
237
- - [ Assign a policy definition using PowerShell] ( ./assign-policy-powershell.md ) .
238
+ - [ Assign a policy definition using PowerShell] ( ./assign-policy-powershell.md ) .
0 commit comments