Enforcement Mode Enabled

Question

Hello,

In the diagram below:

In best practice framework - the1st aspect is assign with enforcement mode disabled. Ok.

Is it correct to say that the 2nd aspect is assign with enforcement mode enabled?

https://learn.microsoft.com/en-us/training/modules/sovereignty-policy-initiatives/azure-policies-evaluation-resources

Thank you

Regards
Marouf

Answer 1

Yep, that is correct.

The best practices framework for Azure Policy assignments, as shown in the diagram, follows a staged approach to ensure safe deployment:

First aspect: Assign with Enforcement Mode Disabled

• This is done initially to assess compliance without enforcing the policy.
  • Resource selectors are used to manage deployment rings.
  Second aspect: Assign with Enforcement Mode Enabled
• After validation through compliance checks and health checks across rings, enforcement mode is enabled.
  • This ensures that policies are actively enforced after confirming that there are no unintended disruptions.

So, the process moves from non-enforced (observation mode) to enforced (active mode) in a controlled manner.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin