Skip to content

Commit 6405394

Browse files
authored
Merge pull request #98329 from johndowns/patch-4
Clarify that possible policy assignment scopes include resources
2 parents 37e4f04 + 715a0c0 commit 6405394

File tree

1 file changed

+8
-7
lines changed

1 file changed

+8
-7
lines changed

articles/governance/policy/overview.md

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ title: Overview of Azure Policy
33
description: Azure Policy is a service in Azure, that you use to create, assign and, manage policy definitions in your Azure environment.
44
ms.date: 11/25/2019
55
ms.topic: overview
6+
ms.custom: fasttrack-edit
67
---
78
# What is Azure Policy?
89

@@ -90,11 +91,11 @@ To learn more about the structures of policy definitions, review
9091
## Policy assignment
9192

9293
A policy assignment is a policy definition that has been assigned to take place within a specific
93-
scope. This scope could range from a [management group](../management-groups/overview.md) to a
94-
resource group. The term *scope* refers to all the resource groups, subscriptions, or management
95-
groups that the policy definition is assigned to. Policy assignments are inherited by all child
96-
resources. This design means that a policy applied to a resource group is also applied to resources
97-
in that resource group. However, you can exclude a subscope from the policy assignment.
94+
scope. This scope could range from a [management group](../management-groups/overview.md) to an
95+
individual resource. The term *scope* refers to all the resources, resource groups, subscriptions,
96+
or management groups that the policy definition is assigned to. Policy assignments are inherited
97+
by all child resources. This design means that a policy applied to a resource group is also applied
98+
to resources in that resource group. However, you can exclude a subscope from the policy assignment.
9899

99100
For example, at the subscription scope, you can assign a policy that prevents the creation of
100101
networking resources. You could exclude a resource group in that subscription that is intended for
@@ -155,7 +156,7 @@ Under this initiative, you would have policy definitions such as:
155156

156157
Like a policy assignment, an initiative assignment is an initiative definition assigned to a
157158
specific scope. Initiative assignments reduce the need to make several initiative definitions for
158-
each scope. This scope could also range from a management group to a resource group.
159+
each scope. This scope could also range from a management group to an individual resource.
159160

160161
Each initiative is assignable to different scopes. One initiative can be assigned to both
161162
**subscriptionA** and **subscriptionB**.
@@ -234,4 +235,4 @@ next steps:
234235

235236
- [Assign a policy definition using the portal](./assign-policy-portal.md).
236237
- [Assign a policy definition using the Azure CLI](./assign-policy-azurecli.md).
237-
- [Assign a policy definition using PowerShell](./assign-policy-powershell.md).
238+
- [Assign a policy definition using PowerShell](./assign-policy-powershell.md).

0 commit comments

Comments
 (0)