--- title: Learn How to Empower Azure Self-Service for Self-Organization description: Learn how to apply modern governance to empower development and infrastructure teams to self-serve using Microsoft Azure Policy. image: https://blogs.incyclesoftware.com/hubfs/azure-policy-web.jpg --- # How to Empower Azure Self-Service for Self-Organization Posted by Phil DeVeau - January 08, 2021 #### Regardless of the methods used for deployment, we should be equally empowered within defined boundaries. It is possible with policy to “deny,” when a deny policy effect is handled the request returns a forbidden state and is stopped in its tracks. - [**](https://www.facebook.com/sharer/sharer.php?u=https://blogs.incyclesoftware.com/enterprise-azure-governance/how-to-empower-azure-self-service-for-self-organization) - [**](https://www.linkedin.com/shareArticle?mini=true&url=https://blogs.incyclesoftware.com/enterprise-azure-governance/how-to-empower-azure-self-service-for-self-organization&title=&summary=&source=) - [**](https://twitter.com/home?status=) - [**](mailto:?&subject=https://blogs.incyclesoftware.com/enterprise-azure-governance/how-to-empower-azure-self-service-for-self-organization&body=https://blogs.incyclesoftware.com/enterprise-azure-governance/how-to-empower-azure-self-service-for-self-organization) ** ![header-picture](https://blogs.incyclesoftware.com/hubfs/azure-policy-web.jpg "header-picture") ### Should I Hit it with a Hammer?  When deploying to Azure whether through a CI/CD pipeline, Azure Portal, or any other supported method, there are gates we can add to help empower and support that deployment. Gem cutters must consider this question often. *Should I hit it with a hammer*? When gems are cut, they are carefully faceted to match an ideal solution. Obviously gems that are cut well sell for more money than the cost of the raw stone and the work put into it. When a gem cutter decides that it is not going to return that value, they hit it with a hammer and the waste scraps are put towards other uses. Azure Policy will ask you the same question, for some similar reasons, “**Should I hit this deployment with a hammer**?”  ### Effects of Deny vs Audit Policy  Regardless of the methods used for deployment, we should be equally empowered within defined boundaries. It is possible with policy to “deny,” when a deny policy effect is handled the request returns a forbidden state and is stopped in its tracks, or in simpler terms, policy whacks the deployment with a hammer. Often on a governance journey this is the first step, but is it the ***right*** step? Such denials stop development. This may be right for production, but wrong for development; right for externally facing applications, but wrong for internally accessible applications; and on and on. Dialogue is important here.  Auditing deployments can be used to start that dialogue. When an audit event is triggered warnings are issued instead of denials and work can continue.  [![Azure Governance Playbook FREE DOWNLOAD](https://no-cache.hubspot.com/cta/default/707613/12e14509-7f97-4632-9ac5-296ad0dc3b81.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/12e14509-7f97-4632-9ac5-296ad0dc3b81) | The audit rule snippet, when violated, allows our deployment to continue and is validated at the end of the deployment, messages are added to our audit log citing the warning on this deployment.  | The deny audit rules snippet, when violated, demands that before the deployment starts our deployment will fail with no further actions taken.  | | --- | --- | | “policyRule”: {     “if”: {        “allOf”: […]     },     “then”: {        “effect”: “audit”     }  }  | “policyRule”: {     “if”: {        “allOf”: […]     },     “then”: {        “effect”: “deny”     }  }  |   ### Deny! Deny! Deny?  If I am safest with denial, should I not I always deny? Probably not. There are methods and patterns in Azure policy that will allow us to remediate deployments after the fact. For instance, when resources are not properly tagged, rather than deny for a comparatively trivial missing tag, our remediation will properly tag after the fact, which keeps us moving forward as a team and keeps us moving forward with governance. Open and consistent dialogues are especially important. We are all creating that ideal Azure gemstone together, taking the time to give us effective policy facets is key to effective empowerment.  Empowering your organization in Azure within the bounds of your business goals takes time but is worth the effort for both development teams and business leaders.  1. Do you have assets in Azure that have been created inconsistently?  2. Are teams enabled to create resources in Azure?  3. Are your teams moving slowly because existing organizational structures are not cloud friendly?  If you answered yes to one or more questions you likely have self-service issues working with Azure. For more assistance or a [free consultation](https://www.incyclesoftware.com/microsoft-azure-smart-start-for-app-modernization), contact InCycle. Alternatively, to learn more about enterprise governance, [download Azure Governance Playbook](https://www.incyclesoftware.com/playbook-for-modern-enterprise-and-cloud-governance)!  Topics: [Implementation & Adoption](https://blogs.incyclesoftware.com/enterprise-azure-governance/topic/implementation-adoption) [![Modern Enterprise & Cloud Governance Playbook](https://no-cache.hubspot.com/cta/default/707613/e1a05ffb-2e33-417f-8064-4014f1877e61.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/e1a05ffb-2e33-417f-8064-4014f1877e61) --- ### Recent Posts By Michael Spenny - 08 January, 2021 #### Collaborative Cloud Governance: Auditability & Visibility [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/collaborative-cloud-governance-auditability-and-visibility) By Michael Spenny - 08 January, 2021 #### How Does the Cloud & Azure Transform Traditional Governance? [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/how-does-the-cloud-azure-transform-traditional-governance) By Michael Spenny - 08 January, 2021 #### DevOps Enables Modern Governance [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/devops-enables-modern-governance) --- ### Sign-up for Governance Blog Updates # ![Partners Awards List - 2021](https://blogs.incyclesoftware.com/hs-fs/hubfs/PoY%20Award%202021/Partners%20Awards%20List%20-%202021.png?width=748&name=Partners%20Awards%20List%20-%202021.png) # All About Modern Governance InCycle's Modern Governance blog is the result of almost 20 years of industry experience and is ideal reading for medium and large organizations that are trying to navigate cloud adoption and are struggling to design and implement modern governance for either a team, business unit or across the enterprise. The blog is comprehensive and addresses various stakeholders, including operations, security, application development, accounting, and audit. The goal of the blog is to showcase modern governance drivers, new challenges that arise, and to provide actionable guidance for practitioners to complete a modern governance transformation. ### Azure Governance Playbook FREE guidance and tools to complete governance transformation. [![Learn More!](https://no-cache.hubspot.com/cta/default/707613/d0b6969d-3645-4839-ae95-84acb7ca61a2.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/d0b6969d-3645-4839-ae95-84acb7ca61a2) ### Posts by Topic - [Cost Control (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/cost-control) - [Security (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/security) - [Structure & Responsibilities (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/structure-responsibilities) - [Visibility (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/visibility) - [Implementation & Adoption (4)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/implementation-adoption) ### Most Popular Posts ### Blog Archive - [January 2021 (23)](https://blogs.incyclesoftware.com/enterprise-azure-governance/archive/2021/01) - [February 2021 (1)](https://blogs.incyclesoftware.com/enterprise-azure-governance/archive/2021/02) - [**](https://twitter.com/incyclesoftware?lang=en) - [**](https://ca.linkedin.com/company/incycle-software) - [**](https://www.facebook.com/InCycleSoftware/) ### About us At InCycle, we believe there is always a better way and today, that includes the cloud. [![InCycle Microsoft Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Incycle%202017%20website%20resources/logo-InCycle-New-white.png?width=200&name=logo-InCycle-New-white.png "InCycle Microsoft Partner")](https://www.incyclesoftware.com/) ### Learn more - [Why Incycle?](https://www.incyclesoftware.com/why-incycle) - [Success Stories](https://www.incyclesoftware.com/customer-success-stories) - [Events](https://www.incyclesoftware.com/events) - [Careers](https://www.incyclesoftware.com/careers) - [About](https://www.incyclesoftware.com/about-incycle-software)   ### 1-800-565-0510 [info@incyclesoftware.com](mailto:info@incyclesoftware.com)  ### ![Microsoft GitHub Verified Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/GitHub%20Verified%20Partner%20-%20white-SQUARE.png?width=256&height=57&name=GitHub%20Verified%20Partner%20-%20white-SQUARE.png) ![Data & AI Solutions Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Data%20%26%20AI%20Solutions%20Partner.png?width=125&height=144&name=Data%20%26%20AI%20Solutions%20Partner.png) ![Digital & App Innovation Solutions Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Digital%20%26%20App%20Innovation%20Solutions%20Partner.png?width=125&height=144&name=Digital%20%26%20App%20Innovation%20Solutions%20Partner.png)   © 2025 InCycle Software [Privacy policy](https://www.incyclesoftware.com/privacy) ** ![](https://px.ads.linkedin.com/collect/?pid=302756&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=302756&fmt=gif)