Azure Update Manager - Dynamic Scope - Automatically add newly created subscriptions

Vedran Banjeglav 41 Reputation points
2025-03-04T11:12:25.1733333+00:00

When creating Maintenance Configuration (Dynamic Scope) in Azure Update Manager there is option to select "All Subscriptions". If I choose that, what will happen with newly created subscriptions ? (ones which will be created after configuration of maintenace configuration is done).

Will those be automatically added to that dynamic scope ?

Thank you.

Azure Update Manager
Azure Update Manager
An Azure service to centrally manages updates and compliance at scale.
356 questions
{count} votes

Accepted answer
  1. Ashok Gandhi Kotnana 4,230 Reputation points Microsoft External Staff
    2025-03-04T13:47:02.3533333+00:00

    Hi @Vedran Banjeglav ,

    Regarding: "unless the dynamic scope is specifically configured to include them at that time" , can you please explain this ?

    Means that when you create a Maintenance Configuration in Azure Update Manager and choose "All Subscriptions", it does not automatically include any future subscriptions you create after the configuration is set up.

    If you do not want manually added Alternate approach is to Automate

    Custom Scripting:

    Create a script that periodically retrieves all subscriptions in your tenant and updates the Maintenance Configuration to include any new ones. For example:

    Use az account list or Get-AzSubscription to fetch all subscriptions.

    Iterate through them and assign the Maintenance Configuration dynamically.

    Refer below: -

    This Azure CLI command link assigns a maintenance configuration to a subscription, allowing you to filter resources by location, OS type, resource groups, resource types, and tags.

    https://learn.microsoft.com/en-us/cli/azure/maintenance/assignment?view=azure-cli-latest#az-maintenance-assignment-create-or-update-subscription

    Azure Policy:

    Use Azure Policy to enforce the attachment of Maintenance Configurations to resources in new subscriptions automatically. This can help ensure compliance without manual intervention.

    Let me know if you need further clarification or assistance!

    Feel free to reach out if you have any further questions or need additional information—I’m happy to assist!

    Please provide your valuable comments User's image

    Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.