Skip to content

Commit 5be9881

Browse files
Update system policy documentation for clarity
Clarified the management and interaction with system policies, including the inability to edit or delete them.
1 parent d660c56 commit 5be9881

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

articles/governance/policy/concepts/systempolicy.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,13 @@ author: nehakulkarni
77
ms.author: nehakulkarni
88
---
99
# What is System Policy?
10-
Azure Policy’s system policy capability enables Microsoft to apply critical, system-level requirements across customer tenants in a safe, controllable manner. Just like existing policy assignments, system policies are applied at a per-tenant basis, and may be applied at any resource hierarchy scope. The rationale for applying system policy assignments is typically due to security.
10+
Azure Policy’s system policy capability enables Microsoft to apply critical, system-level requirements across customer tenants in a safe, controllable manner. Just like existing policy assignments, system policies are applied at a per-tenant basis, and may be applied at any resource hierarchy scope.
1111

1212
## What kind of effect can a system policy have on my environment?
1313
System policies can block resource creation or updates depending on resource configuration (for example, resource location). System policy cannot modify resource configuration. System policies do not generate compliance reports. However, they may generate audit or deny events in activity log.
14-
## How can I interact with system policies?
15-
System policies are Microsoft managed. Customers may not edit or delete system policy assignments. Each system policy will surface a violation message that describes the restriction and includes a relevant documentation link.
14+
15+
## Can I edit or delete a system policy assignment?
16+
No, System policies are fully Microsoft managed. Customers may not edit or delete system policy assignments. Each system policy will surface a violation message that describes the restriction and includes a relevant documentation link. To learn more about the system policy restriction in-place and/or request support, go to the short link included in the system policy definition description.
17+
1618
## How can I see what system policies are applied on my environment?
1719
System policy definitions and assignments are viewable in API, Azure Resource Graph, and other supported SDKs. System policies share a policy definition category of ‘System Policy’, which is found in the policy definition metadata. System policy definitions & assignments are not surfaced in Portal or documentation.

0 commit comments

Comments
 (0)