Policies

Policies is another important feature provided by the ARM framework. Policies provide control over the management plane of resources. While RBAC provides control on access to the data plane, Policies provides control over the management plane. It means that policies affect access and permissions to provision a resource. For example, a policy could explicitly deny the creation of resource in all regions apart from Central US and East US. These policies are checked while creating a new resource and are also evaluated for the existing resources.