Forum Discussion
Solved
Setting polices
Hi all, Which recourse can I assign polices too - Tenant Root Group, ManagementGroup, Subscription, RG, or VM Which ones can I exclude?
- You can assign an Azure Policy to the Tenant Root Group, another Management Group, a subscription, or a Resource Group.
You can exclude any individual resource, resource group, subscription, or Management group- basically any child resource or resource container of the scope.
Details here: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/scope
