I’m currently exploring the policy assignments scoped for my company’s subscription. I was wondering what was the difference between “Allowed locations” and “Allowed locations for resource groups”. From my understanding the former restricts resources to certain locations, the latter restricts only the resource group.
This leads me to a question: if I enforce “Allowed locations for resource group” and select e.g. WE and NE, does this mean that resources can be still created in US and anywhere else? What would be the point to allow a resource groups residing in one location and resources in another?