From 6a9d141123621ba24db0abe6997b8c7ed405c11d Mon Sep 17 00:00:00 2001
From: Tao Yang <tao@taoyang.cloud>
Date: Sat, 4 Apr 2026 18:14:31 +1100
Subject: [PATCH] Add AzureActiveDirectory to allowed service tags for NSG
 policies

---
 policyAssignments/dev/pa-d-nsg.json  | 1 +
 policyAssignments/prod/pa-p-nsg.json | 1 +
 2 files changed, 2 insertions(+)

diff --git a/policyAssignments/dev/pa-d-nsg.json b/policyAssignments/dev/pa-d-nsg.json
index 4d6e610..8ff9f55 100644
--- a/policyAssignments/dev/pa-d-nsg.json
+++ b/policyAssignments/dev/pa-d-nsg.json
@@ -46,6 +46,7 @@
           "Sql",
           "Storage",
           "EventHub",
+          "AzureActiveDirectory",
           "*"
         ]
       }
diff --git a/policyAssignments/prod/pa-p-nsg.json b/policyAssignments/prod/pa-p-nsg.json
index 5a63bc3..f76c590 100644
--- a/policyAssignments/prod/pa-p-nsg.json
+++ b/policyAssignments/prod/pa-p-nsg.json
@@ -46,6 +46,7 @@
           "Sql",
           "Storage",
           "EventHub",
+          "AzureActiveDirectory",
           "*"
         ]
       }