creating policy for VMs

Question

I want to apply perodic assement enabled using azure policy which option I should choose in resource type to select virtual machines. microsfot.classic.compute virtual machines OR microsoft.compute.virtual machine? which one? 2. and after applying policy how long it will take to apply policy. 3. I am getting following error after trying to create a policy what should be the exact for this Creating policy assignment 'Configure periodic checking for missing system updates on azure virtual machines' in 'XXXXXXXXX' failed. The client 'usermail' with object id '1XXXX'does not have authorization to perform action 'Microsoft.Authorization/policyAssignments/write' over scope '/subscriptions/XXXX/providers/Microsoft.Authorization/policyAssignments/XXXX1' or the scope is invalid. If access was recently granted, please refresh your credentials.

Answer 1

Hi Varma, Base on your requirement you could update to use:

• Resource Type (Vm Classic are legacy): microsoft.compute.virtual machine
  • https://learn.microsoft.com/en-us/azure/virtual-machines/vm-usage
• Policy Application Time (This really can vary): Immediate to 24 hours
  • https://learn.microsoft.com/en-us/azure/governance/policy/overview
• Error Solution: User needs Microsoft.Authorization/policyAssignments/write permission. Refresh credentials if access was recently granted.
  • https://learn.microsoft.com/en-us/answers/questions/840436/cannot-assign-a-policy-to-subscription-or-resource

Approve the answer if this help you to solve your question .

Regards,

Luis