Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 74%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
I have the same problem.
Azure policy did not apply tags to the resources
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 5%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHA%3C/text%3E%3C/svg%3E)
Hill Alcantara
56
Reputation points
I enforced a policy to my subscription but it failed to tag networking and managed identity resources such as:
microsoft.network/privatednszones
microsoft.network/privatednszones/virtualnetworklinks
microsoft.managedidentity/userassignedidentities - belong to Databricks managed resources
These resources are what's left of the non-compliant resources. Everything was tagged except these. The user assigned identity have Contributor role on the subscription level.
Per checking, all of these resources are taggable.
Azure Private Link
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 39%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
SwathiDhanwada-MSFT 19,088 Reputation points Moderator2022-10-17T14:53:12.807+00:00 @Hill Alcantara Welcome to Microsoft Q & A Community Forum. Can you please go through this document for troubleshooting the issue and include the details here ? To find the reason of non-compliance of a resource, you can check this document.
-
Hill Alcantara 56 Reputation points
2022-10-18T02:10:16.86+00:00 Hi. I followed this document already. I saw the reason why the microsoft.managedidentity/userassignedidentities wasn't tag. What's left on my issue are these two types of resources.
microsoft.network/privatednszones
microsoft.network/privatednszones/virtualnetworklinksThe resources weren't tagged at all even though the logs said otherwise.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 34%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Ali Alperen Colak 10 Reputation points2023-03-15T09:12:36.66+00:00 Hi I am facing the same problem, is there a solution to that?
-
Brian Stringfellow 1 Reputation point2026-04-09T19:50:15.94+00:00 I am also seeing the same problem with the two resource types not getting tags remediated by policy. All the 1000s of other resources we have are getting tags remediated as expected.
- microsoft.network/privatednszones
- microsoft.network/privatednszones/virtualnetworklinks
Sign in to comment