Allow Deny Assignments for Existing Resource Groups
Allow Deny Assignments for Existing Resource Groups - Currently deny assignments with Blueprints is only allowed for new resources. It would be really helpful if the same feature can be applied to existing resource groups.
Renata Dukes commented
+1 for Azure Government customer
Erik LeMand commented
Deny Assignments is something we really need.
Punit Dixit commented
not sure if i am missing something, but is it not something which can be done now as well? i had RG and then i applied denyassignment on it and it worked perfectly fine.
Arjen Gerritsen commented
..and existing deny assigment and their exclusions can be modified, without re-applying the blueprint. This becomes .useful once resources in within a Blueprint are in use, and due to new insights, deny and exclusions must be altered.