in this video, we will create the initiative assignment using Azure portal.
I will sign this initiative on my subscription level. And the initiative that I chose to assign is the CSCE benchmark for Azur. Let's switch to Azure Portal and do that
Here I am again in Azure Port own. And in order to assign the initiative, I need to go toe the policy service
And let's find the definition for the initiative. So click on definitions and here I will search for C. I s
So this is the C. I. A s initiative
that this ability in initiative In Asher
you can look at all the policies that are included
and they owe much the C s version 110 off the benchmark.
Now let's go and assign the initiative,
so I'll choose this call. The scope of this assignment will be the subscription.
I will leave the resource group open or not filled in because I would like the initiative to be evaluating everything which is within the subscription.
We can do some exclusions, but we'll do that in our next lecture
will enable enforcement of this initiative.
This initiative requires two parameters one is the region where the network watcher should be enabled,
and the other one is a list of virtual machine extensions that that approved for years.
Those are the default ones. I will change the location of the Watcher toe west Us, too,
and I will go next.
We'll leave that US default to manage my identity will review the policy
initiative and whoa, click create.
What will these do is it will go
and a sign on my subscription. If we go back to policy
This policy, you can see now that the
policy initiative is assigned on a subscription level
in our next video, we won't take a look at how we can evaluate those policies and exclude resource is from them.