A compliance officer at Cascade Regional Airlines must apply a consistent bundle of about fifteen related governance policies, covering tagging, allowed regions, and allowed VM SKUs, to every current and future outstation-office subscription. What is the most efficient way to do this?
Select an answer to reveal the explanation.
Short Explanation
Imagine boarding fifteen separate rulebooks onto every outstation office one at a time versus binding them into a single manual and handing out one copy. An initiative is that bound manual: one assignment, and every policy inside it travels together.
Full Explanation
An Azure Policy initiative, also called a policy set definition, groups multiple related policy definitions into one logical unit that is assigned as a single object. Assigning that initiative at the management group containing the outstation subscriptions means every policy inside it is inherited by every subscription under that management group now and automatically by any subscription added there later, with one compliance report covering the whole bundle. Assigning fifteen separate policies individually to each subscription works today but multiplies both the administrative effort and the chance of drift, since a future change would have to be repeated across every subscription and every policy. RBAC deny assignments are a mechanism for explicitly blocking specific actions for specific principals, most commonly seen with Azure Blueprints artifacts; they do not evaluate resource properties like tags, regions, or SKUs the way Azure Policy does, so they cannot substitute for a policy initiative. A resource lock only prevents delete or modify operations on existing resources and has no concept of tagging or SKU compliance at all. One caveat: initiative parameters still need per-assignment values if different subscriptions require different allowed regions, so parameterize the initiative rather than duplicating it. Confirm the rollout by checking the Compliance blade at the management group and verifying all outstation subscriptions report against the same initiative.