last sync: 2020-Dec-04 15:12:59 UTC

Azure Policy definition

Inherit a tag from the subscription if missing

Name Inherit a tag from the subscription if missing
Azure Portal
Id 40df99da-1232-49b1-a39a-6da8d878f469
Version 1.0.0
details on versioning
Category Tags
Microsoft docs
Description Adds the specified tag with its value from the containing subscription when any resource missing this tag is created or updated. Existing resources can be remediated by triggering a remediation task. If the tag exists with a different value it will not be changed.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Fixed: modify
Used RBAC Role
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-02-20 08:25:18 add 40df99da-1232-49b1-a39a-6da8d878f469
Used in Initiatives none
Json
{
  "properties": {
    "displayName": "Inherit a tag from the subscription if missing",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Adds the specified tag with its value from the containing subscription when any resource missing this tag is created or updated. Existing resources can be remediated by triggering a remediation task. If the tag exists with a different value it will not be changed.",
    "metadata": {
      "category": "Tags",
      "version": "1.0.0"
    },
    "parameters": {
      "tagName": {
        "type": "String",
        "metadata": {
          "displayName": "Tag Name",
          "description": "Name of the tag, such as 'environment'"
        }
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
          "field": "[concat('tags[', parameters('tagName'), ']')]",
            "exists": "false"
          },
          {
          "value": "[subscription().tags[parameters('tagName')]]",
            "notEquals": ""
          }
        ]
      },
      "then": {
        "effect": "modify",
        "details": {
          "roleDefinitionIds": [
            "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
          ],
          "operations": [
            {
              "operation": "add",
            "field": "[concat('tags[', parameters('tagName'), ']')]",
            "value": "[subscription().tags[parameters('tagName')]]"
            }
          ]
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "40df99da-1232-49b1-a39a-6da8d878f469"
}