Type: decision
Application teams can request a temporary or long-lived exemption from a specific Azure Policy assignment via a self-service workflow.
The hard deny is only sustainable if teams can unblock themselves — without that, deny-by-default erodes under operational pressure.