From a5a6949539cae4bf28414fbc34e9f27e94cc566f Mon Sep 17 00:00:00 2001 From: Anthony Watherston Date: Thu, 24 Oct 2024 13:31:20 +1100 Subject: [PATCH] Update documentation (#796) Co-authored-by: Anthony Watherston --- Docs/settings-global-setting-file.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Docs/settings-global-setting-file.md b/Docs/settings-global-setting-file.md index 3e2601b5..562bdf99 100644 --- a/Docs/settings-global-setting-file.md +++ b/Docs/settings-global-setting-file.md @@ -86,7 +86,10 @@ EPAC has a concept of an environment identified by a string (unique per reposito - `pacSelector`: the logical name of the EPAC environment. - `cloud`: select cloud environments. - `tenantId`: enables multi-tenant scenarios. - - `deploymentRootScope`: the deployment scope for Policy and Policy Set definitions. Policy Assignments can only defined at this scope and child scopes (recursive). + - `deploymentRootScope`: the deployment scope for Policy and Policy Set definitions. Policy Assignments can only defined at this scope and child scopes (recursive). The format for each scope level is as follows: + - Management Group: `/providers/Microsoft.Management/managementGroups/{management-group-name}` + - Subscription: `/subscriptions/{subscription-id}` + - Resource Group: `/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}` - `desiredState`: defines the desired state strategy. - `strategy`: see [Desired State Strategy](settings-desired-state.md). - `keepDfcSecurityAssignments`: see [Managing Defender for Cloud Policy Assignments](settings-dfc-assignments.md).