Security compliance

Overview

Security compliance is a document type in Azure Documenter that provides a detailed status report on policy assignments across your subscriptions and resources.

The Security compliance document reports on the status of Azure Policy assignments across your subscriptions and resources.

Document structure

The document is organized per subscription. For each subscription, the report includes:

• Assignments — a table listing all policy assignments with counts for Compliant, Non Compliant, Exempt, and Conflict resources per assignment
• Per initiative — for each initiative assignment, a list of the policies it contains or "No data available" if the initiative has no policy details
• Policy groups — policies not grouped under an initiative appear under "Not grouped policies" with their compliance state
• Per policy — a detailed resource-level table listing every resource evaluated under the policy

The per-policy resource table columns are:

If a subscription has no policy assignments configured, the document shows No initiatives available for that subscription.

Configuration

Use the following steps to generate a Security compliance document. Navigate to Azure Documenter to get started.

1. Click New configuration. The Configure your document wizard opens.
2. In Step 1 — Basics, enter a configuration name. Under Choose document type, select Security compliance. Choose the Policy states to include: All, Compliant, Non compliant, Conflict, or Exempt. Click Next.
3. In Step 2 — Service principal, select the service principal and configure the subscription scope. Click Next.
4. Complete Steps 3–6 (Branding, Publish settings, Schedule, Notifications) as required. Click Next after each step.
5. In Step 7 — Review, confirm your configuration and click Finish.

Once generation is complete, a URL is created for the document, and you can download it using the Download link.