AzPolicyAdvertizer

last sync: 2024-Apr-25 17:46:59 UTC

Configure periodic checking for missing system updates on azure Arc-enabled servers

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure periodic checking for missing system updates on azure Arc-enabled servers
Id bfea026e-043f-4ff4-9d1b-bf301ca7ff46
Version 2.2.1
Details on versioning
Category Azure Update Manager
Microsoft Learn
Description Configure auto-assessment (every 24 hours) for OS updates on Azure Arc-enabled servers. You can control the scope of assignment according to machine subscription, resource group, location or tag. Learn more about this for Windows: https://aka.ms/computevm-windowspatchassessmentmode, for Linux: https://aka.ms/computevm-linuxpatchassessmentmode.
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Fixed
modify
RBAC role(s)
Role Name Role Id
Azure Connected Machine Resource Administrator cd570a14-e51a-42ad-bac8-bafd67325302
Rule aliases IF (3)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.HybridCompute/machines/osName Microsoft.HybridCompute machines properties.osName false
Microsoft.HybridCompute/machines/osProfile.linuxConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.linuxConfiguration.patchSettings.assessmentMode true
Microsoft.HybridCompute/machines/osProfile.windowsConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.windowsConfiguration.patchSettings.assessmentMode true
THEN-Operations (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.HybridCompute/machines/osProfile.linuxConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.linuxConfiguration.patchSettings.assessmentMode true
Microsoft.HybridCompute/machines/osProfile.windowsConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.windowsConfiguration.patchSettings.assessmentMode true
Rule resource types IF (1)
Microsoft.HybridCompute/machines
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Configure periodic checking for missing system updates on azure virtual machines and Arc-enabled virtual machines Deploy-AUM-CheckUpdates Security Center GA ALZ
Configure periodic checking for missing system updates on azure virtual machines and Arc-enabled virtual machines Deploy-AUM-CheckUpdates Security Center GA ALZ
History
Date/Time (UTC ymd) (i) Change type Change detail
2023-09-18 18:02:04 change Patch, old suffix: preview (2.2.0-preview > 2.2.1)
2023-09-11 17:59:12 change Minor, suffix remains equal (2.1.0-preview > 2.2.0-preview)
2023-01-13 18:06:06 change Minor, suffix remains equal (2.0.0-preview > 2.1.0-preview)
2022-12-21 17:43:51 change Major, suffix remains equal (1.1.0-preview > 2.0.0-preview)
2022-04-29 18:06:01 change Minor, suffix remains equal (1.0.0-preview > 1.1.0-preview)
2021-10-08 15:47:40 add bfea026e-043f-4ff4-9d1b-bf301ca7ff46
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC