Policy Assignments
Inspect every policy assignment across your environment in one dashboard, get live compliance reports on a schedule you control, and create new assignments directly from Clophi.
Overview
Clophi fetches every policy assignment in your environment and lists them in the Policy Assignment Dashboard. You can click on the assignment name to get the full assignment properties in the right tab.
Inspecting an Assignment
Each entry in the dashboard exposes the full context of a policy assignment:
- AssignmentThe assignment's display name.
- ScopeThe subscription, resource group, or management group where the assignment is applied.
- DefinitionThe underlying policy definition referenced by the assignment.
- Resource ComplianceA summary of the assignment's compliance state that shows compliant and non-compliant resources count. Click to view the full per-resource compliance list.
- Drift Detection StateWhen enabled, Clophi captures the assignment's current configuration as a baseline and reports any configuration changes against that baseline in the Drift Info dashboard.
Live Compliance Reporting
Resource compliance is evaluated by Clophi's own compliance engine rather than relying on Azure's native compliance pipeline. This gives you three advantages:
- Better visibility: Azure's built-in compliance evaluation does not present you the results in detail. The properties which are not provided to user by Azure; such as list of counted objects or full list of policy triggering fields, can be directly viewed over Clophi's compliance engine results.
- Configurable check cycles: Defines how often Clophi re-evaluates resources against the assignment, from minutes to hours.
- Live results: Compliance reports reflect the current state of your resources.
Faster than native Azure compliance
Azure's built-in compliance evaluation can take significant time to surface state changes. By running its own engine on a cycle you control, Clophi reports resources compliance the moment it happens.
Creating an Assignment
You can create new assignments directly from Clophi without leaving the dashboard. Fill the required inputs in the right tab, then choose how to apply the assignment:
- CreateLet Clophi create the policy assignment directly in the selected scope.
- DownloadExport the assignment as Policy-as-Code in Terraform , Bicep , or ARM Template either as parameterized or non-parameterized version.
