Azure Policy on ManagementGroups

[pattisanta]

Hi,
Hopefully someone can help me out. I am trying to assign a azure policy to an management group.
here is my bicep file
targetScope = 'managementGroup'

@description('Target Management Group')
param targetMG string = 'MG-Test-01'
param policyAssignmentName string = 'CreateOnDateTag'
var policyDefinition = '/providers/Microsoft.Management/managementGroups/${targetMG}/providers/Microsoft.Authorization/policyDefinitions/CreateOnDate'

var mgScope = tenantResourceId('Microsoft.Management/managementGroups', targetMG)

resource policyAssignment 'Microsoft.Authorization/policyAssignments@2020-03-01' = {
name: policyAssignmentName
properties: {
scope: mgScope
policyDefinitionId: extensionResourceId(mgScope, 'Microsoft.Authorization/policyDefinitions', policyDefinition)
}
}

Thanks,
Patti

[azMantas]

I believe that the error is hidden in policyDefinitionId under policyAssignment resource. You already have a variable with policy definitionid called policyDefinition

resource policyAssignment 'Microsoft.Authorization/policyAssignments@2020-03-01' = {
  name: policyAssignmentName
  properties: {
    scope: mgScope
    policyDefinitionId: policyDefinition
  }
}

[pattisanta]

Thanks for catching. All works
Patti