Policy Exemption on resource group level

[jose-ceschiatti]

Looking for confirmation if when the desired state configuration is set to ignore resource groups on the global settings it also means EPAC will ignore any policy exemptions set to the resource group level EG.:

        "desiredState": { // [optional]
            "strategy": "ownedOnly", // default full
            // full      = delete any unknown assignments and Policy/Set definitions in managed scope not containing metadata.pacOwnerId
            // ownedOnly = delete only our own assignments as indicated by metadata.pacOwnerId field
            "includeResourceGroups": false,
            "excludedScopes": [
                // Management Groups
                // Subscriptions
                // Resource Groups
            ],
            "excludedPolicyDefinitions": [
                // wild cards allowed
            ],
            "excludedPolicySetDefinitions": [
                // wild cards allowed
            ],
            "excludedPolicyAssignments": [
                // wild cards allowed
            ]
        }
        
        
      If config set as above deployment on global settings will the deployment  ignore any exemptions with scope tageting a resource group like the bellow??
              },
    {
        "name": "xxxxxxxxxxxxxxxxxxx-rg-IPExemption",
        "displayName": "xxxxxxxxxxxxxxxx-rg-IPExemption",
        "description": "Policy exemption for public IP on VMs for xxxxxxxxxxxxxxxxxx-rg",
        "exemptionCategory": "waiver",
        "scope": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/XXXXX-RG",
        "policyAssignmentId": "/providers/Microsoft.Management/managementGroups/dell-production-mg/providers/Microsoft.Authorization/policyAssignments/xxxxx",
        "policyDefinitionReferenceIds": [
            "Network_interfaces_should_not_have_public_IPs"
        ],
        "metadata": {
            "custom": "value"
        }
    },

[anwather]

Ignore resource groups applies to policy assignments - you can't control exemptions to be ignored. Basically is the assignment is owned by EPAC then the exemption will be as well.

[anwather]

Closing due to age