Sacha Narinx

@jdrepo any errors that include the text `please allow up to 30 minutes for the hierarchy changes to apply and try again.` are related to delays in the policy engine...

@jdrepo you can't change the wait time yourself, but we've pushed through a patch to increase the wait time an additional couple of minutes, use the latest release (https://github.com/Azure/Enterprise-Scale/tree/2024-10-14). I...

@jdrepo yes, you can increase the `delayCount`, did see it in the portal deployment parameters file - I've been working with other template param files :) for testing that don't...

@jdrepo is this still an issue for you? If so, could you test the latest release, we've made a lot of core changes to improve reliability.

Closing this as we've deprecated all our diagnostic settings policies and shifted to the PG owned initiative to do the same. Please review https://aka.ms/alz/whatsnew for details.

@iam-take thanks for raising this issue. We recently pushed an update to fix an issue specifically for resource groups (last week), could you confirm you've updated to the latest version...

@iam-take ok, I will validate what is going on.

@iam-take after digging around a bit, it seems that DENY effect will not work for this policy as the policy is looking for the tag field of a resource group...

@ReneRebsdorf Thanks for sharing your issue. It is a reasonable request, but can be complex to implement in complex environments, which is why we are not currently deploying by default....

@ReneRebsdorf you're not wrong, it is potentially complex to govern Arc-enabled resources (agents, etc). We're proposing a new section, that is all about enabling on-prem Arc-enabled features.