Update documentation (#796)

Co-authored-by: Anthony Watherston <[email protected]>
Azure · Oct 24, 2024 · a5a6949 · a5a6949
1 parent 7b09b08
commit a5a6949
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/Docs/settings-global-setting-file.md b/Docs/settings-global-setting-file.md
@@ -86,7 +86,10 @@ EPAC has a concept of an environment identified by a string (unique per reposito
   - `pacSelector`: the logical name of the EPAC environment.
   - `cloud`: select cloud environments.
   - `tenantId`: enables multi-tenant scenarios.
-  - `deploymentRootScope`: the deployment scope for Policy and Policy Set definitions. Policy Assignments can only defined at this scope and child scopes (recursive).
+  - `deploymentRootScope`: the deployment scope for Policy and Policy Set definitions. Policy Assignments can only defined at this scope and child scopes (recursive). The format for each scope level is as follows:
+    - Management Group: `/providers/Microsoft.Management/managementGroups/{management-group-name}`
+    - Subscription: `/subscriptions/{subscription-id}`
+    - Resource Group: `/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}`
   - `desiredState`:  defines the desired state strategy.
     - `strategy`: see [Desired State Strategy](settings-desired-state.md).
     - `keepDfcSecurityAssignments`: see [Managing Defender for Cloud Policy Assignments](settings-dfc-assignments.md).