self-service-policy-exemptions

Type: decision

Decision

Application teams can exempt themselves from any policy assignment via Pull Request.

Why

A deny policy without an exemption path gets worked around rather than enforced — teams find other routes when blocked.

Violations

• Exemption description that does not name the reason for the exemption.

Links

• azure-policy-reference — Exemptions reference a JSON file to look up the policy assignment ID — never a hardcoded ARM ID.
• azure-policy-naming-convention — Self-service policy exemptions rely on predictable policy assignment names.

← Back to knowledge graph