diff --git a/infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep b/infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep index 90aef11f8..e7a36463b 100644 --- a/infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep +++ b/infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep @@ -1730,6 +1730,9 @@ module modPolicyAssignmentLzsDeployVmArcTrack '../../../policy/assignments/polic varRbacRoleDefinitionIds.monitoringContributor varRbacRoleDefinitionIds.reader ] + parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [ + string(varManagementGroupIds.platform) + ] parTelemetryOptOut: parTelemetryOptOut } } @@ -1761,6 +1764,9 @@ module modPolicyAssignmentLzsDeployVmChangeTrack '../../../policy/assignments/po varRbacRoleDefinitionIds.managedIdentityOperator varRbacRoleDefinitionIds.reader ] + parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [ + string(varManagementGroupIds.platform) + ] parTelemetryOptOut: parTelemetryOptOut } } @@ -1792,6 +1798,9 @@ module modPolicyAssignmentLzsDeployVmssChangeTrack '../../../policy/assignments/ varRbacRoleDefinitionIds.managedIdentityOperator varRbacRoleDefinitionIds.reader ] + parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [ + string(varManagementGroupIds.platform) + ] parTelemetryOptOut: parTelemetryOptOut } } @@ -1819,6 +1828,9 @@ module modPolicyAssignmentLzsDeployVmArcMonitor '../../../policy/assignments/pol varRbacRoleDefinitionIds.reader varRbacRoleDefinitionIds.connectedMachineResourceAdministrator ] + parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [ + string(varManagementGroupIds.platform) + ] parTelemetryOptOut: parTelemetryOptOut } }