AzInitiativeAdvertizer

last sync: 2022-Dec-02 17:43:04 UTC

Azure Policy Initiative

Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule

NameConfigure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule
Azure Portal
Id9575b8b7-78ab-4281-b53b-d3c1ace2260b
Version2.0.0
details on versioning
CategoryMonitoring
Microsoft docs
DescriptionMonitor and secure your Windows virtual machines, virtual machine scale sets, and Arc machines by deploying the Azure Monitor Agent extension and associating the machines with a specified Data Collection Rule. Deployment will occur on machines with supported OS images (or machines matching the provided list of images) in supported regions.
TypeBuiltIn
DeprecatedFalse
PreviewFalse
History
Date/Time (UTC ymd) (i) Changes
2022-02-10 17:19:06 add Policy Configure Windows Arc-enabled machines to run Azure Monitor Agent (94f686d6-9a24-4e19-91f1-de937dc171a4)
add Policy Configure Windows virtual machine scale sets to run Azure Monitor Agent using system-assigned managed identity (4efbd9d8-6bc6-45f6-9be2-7fe9dd5d89ff)
Version change: '1.0.1' to '2.0.0'
2021-10-19 15:43:56 Name change: 'Configure Azure Monitor Agent to Windows virtual machines and associate to Data Collection Rule' to 'Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule'
Description change: 'Deploy Azure Monitor Agent for Windows virtual machines if the virtual machine image (OS) and location are in the list defined and the agent is not installed. Then, deploy Association to link virtual machine to specified Data Collection Rule. The list of OS images is updated over time as support is increased.' to 'Monitor and secure your Windows virtual machines, virtual machine scale sets, and Arc machines by deploying the Azure Monitor Agent extension and associating the machines with a specified Data Collection Rule. Deployment will occur on machines with supported OS images (or machines matching the provided list of images) in supported regions.'
2021-05-26 13:43:18 add Initiative 9575b8b7-78ab-4281-b53b-d3c1ace2260b
Policy count Total Policies: 4
Builtin Policies: 4
Static Policies: 0
Policy used
Policy DisplayName Policy Id Category Effect Roles# Roles State
Configure Windows Arc-enabled machines to run Azure Monitor Agent 94f686d6-9a24-4e19-91f1-de937dc171a4 Monitoring Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled		 1 Azure Connected Machine Resource Administrator GA
Configure Windows Machines to be associated with a Data Collection Rule eab1f514-22e3-42e3-9a1f-e1dc9199355c Monitoring Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled		 2 Log Analytics Contributor, Monitoring Contributor GA
Configure Windows virtual machine scale sets to run Azure Monitor Agent using system-assigned managed identity 4efbd9d8-6bc6-45f6-9be2-7fe9dd5d89ff Monitoring Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled		 1 Virtual Machine Contributor GA
Configure Windows virtual machines to run Azure Monitor Agent using system-assigned managed identity ca817e41-e85a-4783-bc7f-dc532d36235e Monitoring Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled		 1 Virtual Machine Contributor GA
Roles used Total Roles usage: 5
Total Roles unique usage: 4
Role Role Id Policies count Policies
Monitoring Contributor 749f88d5-cbae-40b8-bcfc-e573ddc772fa 1 Configure Windows Machines to be associated with a Data Collection Rule
Virtual Machine Contributor 9980e02c-c2be-4d73-94e8-173b1dc7cf3c 2 Configure Windows virtual machine scale sets to run Azure Monitor Agent using system-assigned managed identity, Configure Windows virtual machines to run Azure Monitor Agent using system-assigned managed identity
Azure Connected Machine Resource Administrator cd570a14-e51a-42ad-bac8-bafd67325302 1 Configure Windows Arc-enabled machines to run Azure Monitor Agent
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293 1 Configure Windows Machines to be associated with a Data Collection Rule
JSON