pol assign inline add

kramit · Mar 29, 2020 · 1fc723e · 1fc723e
1 parent 4a2941b
commit 1fc723e
Showing 1 changed file with 12 additions and 2 deletions.
diff --git a/templates/policytestvm/az104-04-vms-template.json b/templates/policytestvm/az104-04-vms-template.json
@@ -2,6 +2,15 @@
     "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
     "contentVersion": "1.0.0.0",
     "parameters": {
+         "policyDefinitionName": {
+            "type": "string",
+            "metadata": {
+                "displayName": "Policy definition name",
+                "description": "Name of the policy to assign."
+            },
+                        "defaultValue": "vmrestriction"
+
+        },
         "rgName": {
             "type": "string",
             "defaultValue": "[resourceGroup().name]",
@@ -235,8 +244,9 @@
             "apiVersion": "2018-05-01",
             "name": "vmrestriction",
             "properties": {
-                "scope": "[subscription().id]",
-                "policyDefinitionId": "[resourceId('Microsoft.Authorization/policyDefinitions', 'vmrestriction')]"
+             "scope": "[if(empty(parameters('rgName')), subscription().id, concat(subscription().id, '/resourceGroups/', parameters('rgName')))]",
+                "enforcementMode": "Default",
+                "policyDefinitionId": "[concat(subscription().id, '/providers/Microsoft.Authorization/policyDefinitions/', parameters('policyDefinitionName'))]"
             }
         }
     ],