---
type: resource-type
title: policies
description: azure resource type Microsoft.Subscription/policies
name: policies
lexicon: azure
resource_type: Microsoft.Subscription/policies
---
`Microsoft.Subscription/policies`, a resource type of the azure lexicon.

## Properties

- `name` (`"default"`, required): The resource name
- `blockSubscriptionsIntoTenant` (`boolean`, optional): Blocks the entering of subscriptions into user's tenant.
- `blockSubscriptionsLeavingTenant` (`boolean`, optional): Blocks the leaving of subscriptions from user's tenant.
- `exemptedPrincipals` (`string[]`, optional): List of user objectIds that are exempted from the set subscription tenant policies for the user's tenant.

## Attributes

- `id`

## Governed by

- [AZR026](/rules/AZR026.md): AKS cluster missing network policy — configure networkPolicy for pod-to-pod traffic control
- [AZR033](/rules/AZR033.md): Tenant subscription policy does not block subscriptions from leaving