last sync: 2021-Oct-15 16:53:14 UTC

Azure Policy Initiative

Deploy prerequisites to enable Guest Configuration policies on virtual machines

NameDeploy prerequisites to enable Guest Configuration policies on virtual machines
Azure Portal
Id12794019-7a00-42cf-95c2-882eed337cc8
Version1.0.0
details on versioning
CategoryGuest Configuration
Microsoft docs
DescriptionThis initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.
TypeBuiltIn
DeprecatedFalse
PreviewFalse
History
Date/Time (UTC ymd) (i) Changes
2021-05-11 14:06:20 Name change: '[Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines' to 'Deploy prerequisites to enable Guest Configuration policies on virtual machines'
2020-07-17 15:57:10 add Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-29 05:46:42 remove Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-23 16:03:23 add Initiative 12794019-7a00-42cf-95c2-882eed337cc8
Policy count Total Policies: 4
Builtin Policies: 4
Static Policies: 0
Policy used
Policy DisplayName Policy Id Category Effect State
Add system-assigned managed identity to enable Guest Configuration assignments on virtual machines with no identities 3cf2ab00-13f1-4d0c-8971-2ac904541a7e Guest Configuration Fixed: modify GA
Add system-assigned managed identity to enable Guest Configuration assignments on VMs with a user-assigned identity 497dff13-db2a-4c0f-8603-28fa3b331ab6 Guest Configuration Fixed: modify GA
Deploy the Linux Guest Configuration extension to enable Guest Configuration assignments on Linux VMs 331e8ea8-378a-410f-a2e5-ae22f38bb0da Guest Configuration Fixed: deployIfNotExists GA
Deploy the Windows Guest Configuration extension to enable Guest Configuration assignments on Windows VMs 385f5831-96d4-41db-9a3c-cd3af78aaae6 Guest Configuration Fixed: deployIfNotExists GA
JSON
{
  "displayName": "Deploy prerequisites to enable Guest Configuration policies on virtual machines",
  "policyType": "BuiltIn",
  "description": "This initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.",
  "metadata": {
    "category": "Guest Configuration",
    "version": "1.0.0"
  },
  "policyDefinitions": [
    {
      "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenNone",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e"
    },
    {
      "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenUser",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6"
    },
    {
      "policyDefinitionReferenceId": "Prerequisite_DeployExtensionWindows",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6"
    },
    {
      "policyDefinitionReferenceId": "Prerequisite_DeployExtensionLinux",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da"
    }
  ]
}