Forum Discussion

CyberSec's avatar
CyberSec
Copper Contributor
Oct 14, 2022
Solved

Scoping - Azure policy

Hello,   How does inheritance work in Azure policy? I've subscription A with a policy to deny EC2 creation. But I create a policy specific to Resource Group with a policy to allow EC2 creation, whi...
Azure Policy
  • iamneeraj's avatar
    iamneeraj
    Oct 25, 2022

    CyberSec  Azure policy inheritance works in form of Hierarchy

    Highest Precedence=== Management Group > Subscription> Resource Group >Resource.


    Subscription Policy to Deny VM(EC2) will not allow you to create a VM as Subscription policy will override the allow policy at Resource Group level.

iamneeraj's avatar
iamneeraj
Learn Expert
Oct 25, 2022

CyberSec  Azure policy inheritance works in form of Hierarchy

Highest Precedence=== Management Group > Subscription> Resource Group >Resource.


Subscription Policy to Deny VM(EC2) will not allow you to create a VM as Subscription policy will override the allow policy at Resource Group level.

Resources