Merge pull request #113351 from DCtheGeek/dmc-ph-rbac

Azure Policy samples - Azure RBAC

Author: v-albemi

articles/role-based-access-control/TOC.yml

@@ -26,6 +26,11 @@
     href: tutorial-custom-role-powershell.md
   - name: Create a custom role - CLI
     href: tutorial-custom-role-cli.md
+- name: Samples
+  items:
+  - name: Azure Policy built-ins
+    displayName: samples, policies, definitions
+    href: ./policy-samples.md
 - name: Concepts
   items:
   - name: Best practices

articles/role-based-access-control/policy-samples.md

@@ -0,0 +1,29 @@
+---
+title: Built-in policy definitions for Azure RBAC
+description: Lists Azure Policy built-in policy definitions for Azure RBAC. These built-in policy definitions provide common approaches to managing your Azure resources.
+ms.date: 05/05/2020
+ms.topic: sample
+author: rolyon
+ms.author: rolyon
+ms.service: role-based-access-control
+ms.custom: subject-policy-samples
+---
+# Azure Policy built-in policy definitions for Azure RBAC
+
+This page is an index of [Azure Policy](../governance/policy/overview.md) built-in policy
+definitions for Azure RBAC. For additional Azure Policy built-ins for other services, see
+[Azure Policy built-in definitions](../governance/policy/samples/built-in-policies.md).
+
+The name of each built-in policy definition links to the policy definition in the Azure portal. Use
+the link in the **GitHub** column to view the source on the
+[Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+
+## Azure RBAC
+
+[!INCLUDE [azure-policy-samples-rp-authorization](../../includes/policy/samples/byrp/microsoft.authorization.md)]
+
+## Next steps
+
+- See the built-ins on the [Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+- Review the [Azure Policy definition structure](../governance/policy/concepts/definition-structure.md).
+- Review [Understanding policy effects](../governance/policy/concepts/effects.md).