Exempt Azure policy for AD Users in specific AD group?

[smartaquarius10]

Hello,

Is it possible to bypass Azure policy for specific AD users or AD groups while creating objects in Azure kubernetes.

Regards, Tanul

[andaryjo]

As far as I know, no, policies apply to all users and principals.

[smartaquarius10]

But then how can we differentiate between admin and a normal user.

Consider Azure policy is applied for disabling root privileges pods. Now, if admin wanted to login aks node following this microsoft suggested approach then it won’t work. Ideally, for admins there should be some way to bypass.