Microsoft.Authorization policydefinitions 2015-10-01-preview
The policydefinitions resource type is an extension resource, which means you can apply it to another resource.
Use the scope property on this resource to set the scope for this resource.
- For Bicep, see Set scope on extension resources in Bicep.
- For JSON, see Set scope on extension resources in ARM templates.
Valid deployment scopes for the policydefinitions resource are:
- Management Group
- Subscription
- Resource Group
Template format
To create a Microsoft.Authorization/policydefinitions resource, add the following Bicep or JSON to your template.
resource symbolicname 'Microsoft.Authorization/policydefinitions@2015-10-01-preview' = {
name: 'string'
scope: resourceSymbolicName
properties: {
description: 'string'
displayName: 'string'
policyRule: any()
policyType: 'string'
}
}
Property values
policydefinitions
| Name | Description | Value |
|---|---|---|
| type | The resource type For Bicep, set this value in the resource declaration. |
'Microsoft.Authorization/policydefinitions' |
| apiVersion | The resource api version For Bicep, set this value in the resource declaration. |
'2015-10-01-preview' |
| name | The resource name | string (required) |
| scope | Use when creating an extension resource at a scope that is different than the deployment scope. | Target resource For Bicep, set this property to the symbolic name of the resource to apply the extension resource. For JSON, set the value to the full name of the resource to apply the extension resource to. |
| properties | The policy definition properties. | PolicyDefinitionProperties |
PolicyDefinitionProperties
| Name | Description | Value |
|---|---|---|
| description | The policy definition description. | string |
| displayName | The display name of the policy definition. | string |
| policyRule | Any object | For Bicep, you can use the any() function. |
| policyType | The type of policy definition. Possible values are NotSpecified, BuiltIn, and Custom. | 'BuiltIn' 'Custom' 'NotSpecified' |
Quickstart templates
The following quickstart templates deploy this resource type.
| Template | Description |
|---|---|
Deploy a policy definition and assign to a management group |
This template is a management group level template that will create a policy definition and assign that policy to the target management group. Currently, this template cannot be deployed via the Azure Portal. |
| Deploy a Policy Def and Assign to Multiple Mgmt Groups |
This template is a management group level template that will create a policy definition and assign that policy to multiple management groups. |