Skip to content

Commit d588111

Browse files
committed
Engg feedback incorporated
1 parent ac1820b commit d588111

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

articles/update-manager/periodic-assessment-at-scale.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ This article describes how to enable Periodic Assessment for your machines at sc
2626
You can monitor the compliance of resources under **Compliance** and remediation status under **Remediation** on the Azure Policy home page.
2727

2828
> [!NOTE]
29-
> Currently, Periodic assessment policies don’t support specialized, migrated, and restored images. However, they work for both marketplace and generalized gallery images, and you need to provide **Contributor** role to the managed identity created during policy assignment. For more information, see [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md).
29+
> Currently, Periodic assessment policies don’t support specialized, migrated, and restored images. However, they work for both marketplace and generalized gallery images, and you need to provide **Contributor** role to the managed identity created during policy assignment. For more information, see [remediation failures for gallery images](troubleshoot.md#policy-remediation-tasks-are-failing-for-gallery-images-and-for-images-with-encrypted-disks).
3030
3131

3232

articles/update-manager/troubleshoot.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ There are remediation failures for gallery images which have a reference to the
6161
The VM Contributor role doesn’t have enough permissions.
6262

6363
### Resolution
64-
- For all the new assignments, assign the contributor role to the managed identity created during policy assignment or remediation.
64+
- For all the new assignments, a recent change is introduced to provide **Contributor** role to the managed identity created during policy assignment for remediation. Going forward, this will be assigned for any new assignments.
6565
- For any previous assignments if you are experiencing failure of remediation tasks, we recommend that you manually assign the contributor role to the managed identity by following the steps listed under [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md)
6666
- Also, in scenarios where the Contributor role doesn’t work either for the linked resources (gallery image) or for the disk in another resource group or subscription, manually provide the managed identity with the right roles and permissions on the scope to unblock remediations by following the steps in [Grant permissions to the managed identity through defined roles](../governance/policy/how-to/remediate-resources.md).
6767

0 commit comments

Comments
 (0)