• Intro
• Series navigation
• Reference links

Intro

In this series I show how to work with Microsoft Defender for Cloud recommendation exemptions by using REST API and PowerShell.

The resource type is Microsoft.Security/standardAssignments, and for exemptions we use effect set to Exempt.

Microsoft has also moved toward exemption-based workflows while grouped recommendations and disable rules are being deprecated. If you are migrating legacy workflows, read:

• Transition from disable rules to exemptions
• Transition from grouped to individual recommendations

Series navigation

Read the articles in this order:

1. Part 1 - Get (List) exemptions
2. Part 2 - Create exemptions
3. Part 3 - Delete exemptions

Reference links

• REST API (composite) list operation: Standard Assignments - List
• REST API create operation: Standard Assignments - Create
• REST API delete operation: Standard Assignments - Delete
• ARM/Bicep reference: Microsoft.Security/standardAssignments

Final remark: This series uses the current and supported Defender for Cloud exemptions model based on Microsoft.Security/standardAssignments.