-
Notifications
You must be signed in to change notification settings - Fork 3.4k
az policy assignment update does not remove notScope if empty #25355
Copy link
Copy link
Open
Labels
ARMaz resource/group/lock/tag/deployment/policy/managementapp/account management-groupaz resource/group/lock/tag/deployment/policy/managementapp/account management-groupAuto-AssignAuto assign by botAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamact-identity-squadcustomer-reportedIssues that are reported by GitHub users external to the Azure organization.Issues that are reported by GitHub users external to the Azure organization.feature-request
Milestone
Metadata
Metadata
Assignees
Labels
ARMaz resource/group/lock/tag/deployment/policy/managementapp/account management-groupaz resource/group/lock/tag/deployment/policy/managementapp/account management-groupAuto-AssignAuto assign by botAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamact-identity-squadcustomer-reportedIssues that are reported by GitHub users external to the Azure organization.Issues that are reported by GitHub users external to the Azure organization.feature-request
Describe the bug
Today I wanted to modify one policy assignment removing all notScopes. I have one notScope left and I want to remove it. When I use argument --not-scope with empty value "" then nothing happens, no error appears but also no change appears. NotScope is not deleted.
Command Name
az policy assignment updateTo Reproduce:
Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.
az policy assignment update -n {} --scope {} --not-scope ""Expected Behavior
When I use empty value ("") of argument (--not-scope), all notScopes are deleted
Environment Summary
Additional Context