@@ -432,32 +432,42 @@ function Test-PolicyAssignmentEnforcementMode
432
432
$policy = New-AzPolicyDefinition - Name $policyName - Policy " $TestOutputRoot \SamplePolicyDefinition.json" - Description $description
433
433
434
434
# assign the policy definition to the resource group, get the assignment back and validate
435
- $actual = New-AzPolicyAssignment - Name testPA - PolicyDefinition $policy - Scope $rg.ResourceId - Description $description - Location $location - EnforcementMode $enforcementModeDoNotEnforce
435
+ $actual = New-AzPolicyAssignment - Name testPA - PolicyDefinition $policy - Scope $rg.ResourceId - Description $description - Location $location - EnforcementMode DoNotEnforce
436
436
$expected = Get-AzPolicyAssignment - Name testPA - Scope $rg.ResourceId
437
437
Assert-AreEqual $expected.Name $actual.Name
438
438
Assert-AreEqual Microsoft.Authorization/ policyAssignments $actual.ResourceType
439
439
Assert-AreEqual $expected.PolicyAssignmentId $actual.PolicyAssignmentId
440
440
Assert-AreEqual $expected.Properties.PolicyDefinitionId $policy.PolicyDefinitionId
441
441
Assert-AreEqual $expected.Properties.Scope $rg.ResourceId
442
- Assert-AreEqual $expected.Properties.EnforcementMode $actual.Properties.EnforcementMode
442
+ Assert-AreEqual $expected.Properties.EnforcementMode $actual.Properties.EnforcementMode
443
+ Assert-AreEqual $expected.Properties.EnforcementMode $enforcementModeDoNotEnforce
443
444
Assert-AreEqual $location $actual.Location
444
445
Assert-AreEqual $expected.Location $actual.Location
445
446
446
447
# get it back by id and validate
447
448
$actualById = Get-AzPolicyAssignment - Id $actual.ResourceId
448
449
Assert-AreEqual $actual.Properties.EnforcementMode $actualById.Properties.EnforcementMode
449
450
450
- # update the policy assignment, validate enforcement mode is updated correctly.
451
- $setResult = Set-AzPolicyAssignment - Id $actualById.ResourceId - DisplayName " testDisplay" - EnforcementMode $enforcementModeDefault
451
+ # update the policy assignment, validate enforcement mode is updated correctly with Default enum value .
452
+ $setResult = Set-AzPolicyAssignment - Id $actualById.ResourceId - DisplayName " testDisplay" - EnforcementMode Default
452
453
Assert-AreEqual " testDisplay" $setResult.Properties.DisplayName
453
454
Assert-AreEqual $enforcementModeDefault $setResult.Properties.EnforcementMode
454
455
456
+ # update the policy assignment, validate enforcement mode is updated correctly with 'Default' enum as string value.
457
+ $setResult = Set-AzPolicyAssignment - Id $actualById.ResourceId - DisplayName " testDisplay" - EnforcementMode $enforcementModeDefault
458
+ Assert-AreEqual " testDisplay" $setResult.Properties.DisplayName
459
+ Assert-AreEqual $enforcementModeDefault $setResult.Properties.EnforcementMode
460
+
455
461
# make another policy assignment without an enforcementMode, validate default mode is set
456
462
$withoutEnforcementMode = New-AzPolicyAssignment - Name test2 - Scope $rg.ResourceId - PolicyDefinition $policy - Description $description
457
463
Assert-AreEqual $enforcementModeDefault $withoutEnforcementMode.Properties.EnforcementMode
458
464
459
465
# set an enforcement mode to the new assignment using the SET cmdlet
460
466
$setResult = Set-AzPolicyAssignment - Id $withoutEnforcementMode.ResourceId - Location $location - EnforcementMode $enforcementModeDoNotEnforce
467
+ Assert-AreEqual $enforcementModeDoNotEnforce $setResult.Properties.EnforcementMode
468
+
469
+ # set an enforcement mode to the new assignment using the SET cmdlet enum value and validate
470
+ $setResult = Set-AzPolicyAssignment - Id $withoutEnforcementMode.ResourceId - Location $location - EnforcementMode DoNotEnforce
461
471
Assert-AreEqual $enforcementModeDoNotEnforce $setResult.Properties.EnforcementMode
462
472
463
473
# verify enforcement mode is returned in collection GET
0 commit comments