Skip to content

Commit ac1820b

Browse files
committed
peer review inputs incorporated
1 parent bc95319 commit ac1820b

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

articles/update-manager/periodic-assessment-at-scale.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ This article describes how to enable Periodic Assessment for your machines at sc
2626
You can monitor the compliance of resources under **Compliance** and remediation status under **Remediation** on the Azure Policy home page.
2727

2828
> [!NOTE]
29-
> Currently, Periodic assessment policies don’t support specialized, migrated, and restored images. However, they work for both marketplace and generalized gallery images and you need to provide **Contributor** role to the managed identity created during policy assignment. For more information, see [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md).
29+
> Currently, Periodic assessment policies don’t support specialized, migrated, and restored images. However, they work for both marketplace and generalized gallery images, and you need to provide **Contributor** role to the managed identity created during policy assignment. For more information, see [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md).
3030
3131

3232

articles/update-manager/troubleshoot.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -55,15 +55,15 @@ To review the logs related to all actions performed by the extension, on Windows
5555
## Policy remediation tasks are failing for gallery images and for images with encrypted disks
5656

5757
### Issue
58-
There are remediation failures for gallery images which have a reference to the gallery image in the VM mode. It is because it requires the read permission and it is currently not part of the VM Contributor role.
58+
There are remediation failures for gallery images which have a reference to the gallery image in the VM mode. This is because it requires the read permission and it is currently not part of the VM Contributor role.
5959

6060
### Cause
6161
The VM Contributor role doesn’t have enough permissions.
6262

6363
### Resolution
64-
- For all new assignments, assign the contributor role to the managed identity created during the policy assignment or remediation.
65-
- For any previous assignments if you are experiencing failure of remediation tasks. We recommend that you manually assign the contributor role to the managed identity by following the steps listed [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md)
66-
- In scenarios where the Contributor role doesn’t work either for the linked resources (gallery image) or for the disk in another resource group or subscription, then manually provide the managed identity with the right roles and permissions on the scope to unblock remediations by following the steps in [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md).
64+
- For all the new assignments, assign the contributor role to the managed identity created during policy assignment or remediation.
65+
- For any previous assignments if you are experiencing failure of remediation tasks, we recommend that you manually assign the contributor role to the managed identity by following the steps listed under [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md)
66+
- Also, in scenarios where the Contributor role doesn’t work either for the linked resources (gallery image) or for the disk in another resource group or subscription, manually provide the managed identity with the right roles and permissions on the scope to unblock remediations by following the steps in [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md).
6767

6868

6969
### Unable to generate periodic assessment for Arc-enabled servers

0 commit comments

Comments
 (0)