Requesting an Exemption from a Policy in Azure at DTU

Introduction

This guide outlines the steps for requesting an exemption from an Azure policy at DTU. Azure Policy exemptions allow a resource hierarchy or individual resource to be temporarily waived from policy evaluation, counting toward overall compliance but not being assessed during the waiver period.

Steps to Request an Exemption

1. Identify the Need for an Exemption

Determine why the resource requires an exemption. Common reasons include: - The resource needs to comply through alternative methods (Mitigated). - Temporary acceptance of non-compliance due to business needs (Waiver).

2. Gather Required Information

When requesting an exemption, you will need to provide the following details:

• Display Name and Description: Provide a clear and concise name and description for the exemption.
• Metadata: Include who requested, who approved, when it was approved, and any relevant ticket references.
• Resource ID: The ID of the subscription/resource group/resource to be exempted.
• Policy Assignment ID: The full path name of the policy assignment or initiative assignment.
• Policy Definition Reference IDs: If the exemption is for an initiative assignment, specify the policy definitions to be exempted.
• Exemption Category: Specify if it is a "Mitigated" or "Waiver".
• Expiration Date: (Optional) When the exemption should expire.

3. Submit the Exemption Request Form

Once you have gathered all the required information, submit your exemption request through the official DTU Azure Policy Exemption Request Form:

Azure Policy Exemption Request Form.

Ensure all mandatory fields are completed with accurate information. The form will automatically route your request to the appropriate teams for review.

The following persons have access to the responses: Sturla Bragason stubrag@dtu.dk, Jonathan Julegaard Christensen jjuch@dtu.dk, Andreas Peter Kallesøeankal@dtu.dk.

4. Review and Approval

The exemption request will be reviewed by the relevant team or individual responsible for policy compliance at DTU. Follow up if needed to ensure your request is processed in a timely manner.

5. Implementation

Upon approval, the exemption will be implemented. Verify that the resource is now showing as exempt in the Azure compliance review.

Additional Information

For more details on Azure Policy exemptions, refer to the DTU Azure Public Documentation or contact the Azure Cloud Adoption team at azure-cloud-adoption@dtu.dk.

Contact Information

For support, please contact us via email at azure-cloud-adoption@dtu.dk or visit the DTU IT support webpage. For critical cases, call us at +45 4525 5555.