Enable Automanage for virtual machines through Azure Policy

If you want to enable Automanage for lots of VMs, you can do that using a built-in Azure Policy. This article will walk you through finding the right policy and how to assign it in order to enable Automanage in the Azure portal.


If you don't have an Azure subscription, create an account before you begin.


Free trial accounts do not have access to the virtual machines used in this tutorial. Please upgrade to a Pay-As-You-Go subscription.


The following Azure RBAC permission is needed to enable Automanage: Owner role or Contributor along with User Access Administrator roles.

The Automanage policy definition can be found in the Azure portal by the name of Configure virtual machines to be onboarded to Azure Automanage. If you click on this link, skip directly to step 8 in Locate and assign the policy below.

Sign in to Azure

Sign in to the Azure portal.

Locate and assign the policy

  1. Navigate to Policy in the Azure portal

  2. Go to the Definitions pane

  3. Click the Categories dropdown to see the available options

  4. Select the Enable Automanage – Azure virtual machine best practices option

  5. Now the list will update to show a built-in policy with a name that starts with Enable Automanage…

  6. Click on the Enable Automanage - Azure virtual machine best practices built-in policy name

  7. After clicking on the policy, you can now see the Definition tab


    The Azure Policy definition is used to set Automanage parameters like the configuration profile or the account. It also sets filters that ensure the policy applies only to the correct VMs.

  8. Click the Assign button to create an Assignment

  9. Under the Basics tab, fill out Scope by setting the Subscription and Resource Group


    The Scope lets you define which VMs this policy applies to. You can set application at the subscription level or resource group level. If you set a resource group, all VMs that are currently in that resource group or any future VMs we add to it will have Automanage automatically enabled.

  10. Click on the Parameters tab and set the Automanage Account and the desired Configuration Profile

  11. Under the Review + create tab, review the settings

  12. Apply the Assignment by clicking Create

  13. View your assignments in the Assignments tab next to Definition


It will take some time for that policy to begin taking effect on the VMs currently in the resource group or subscription.

Next steps

Learn another way to enable Azure Automanage for virtual machines through the Azure portal.