got this error when creating CLI powershell. please advise
{"error":{"code":"RequestDisallowedByPolicy","target":"cloudshell","message":"Resource ‘cloudshell’ was disallowed by policy. Policy identifiers: ‘[{"policyAssignment":{"name":"Allowed locations","id":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/47f9111a3dc447249295c3e2"},"policyDefinition":{"name":"Allowed locations","id":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c"}},{"policyAssignment":{"name":"Allowed locations – Exclude IoTCentral","id":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/c2fa07b5891b4e31baff87a9"},"policyDefinition":{"name":"Allowed locations – Exclude IoTCentral","id":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyDefinitions/ad14bdb6-1405-40f3-8e13-96b56d70251e"}}]’.","additionalInfo":[{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Allowed locations","evaluationDetails":{"evaluatedExpressions":[{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":["canadaeast","centralindia","centralus","eastasia","eastus","eastus2","germanynorth","germanywestcentral","global","japanwest","koreacentral","koreasouth","northcentralus","southcentralus","southindia","westcentralus","westindia","westus","westus2"],"operator":"NotIn"},{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":"global","operator":"NotEquals"},{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Storage/storageAccounts","targetValue":"Microsoft.AzureActiveDirectory/b2cDirectories","operator":"NotEquals"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c","policyDefinitionName":"e56962a6-4747-49cd-b67b-bf8b01975c4c","policyDefinitionEffect":"deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/47f9111a3dc447249295c3e2","policyAssignmentName":"47f9111a3dc447249295c3e2","policyAssignmentDisplayName":"Allowed locations","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs"}},{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Allowed locations – Exclude IoTCentral","evaluationDetails":{"evaluatedExpressions":[{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":["canadaeast","centralindia","centralus","eastasia","eastus","eastus2","germanynorth","germanywestcentral","global","japanwest","koreacentral","koreasouth","northcentralus","southcentralus","southindia","westcentralus","westindia","westus","westus2"],"operator":"NotIn"},{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":"global","operator":"NotEquals"},{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Storage/storageAccounts","targetValue":"Microsoft.AzureActiveDirectory/b2cDirectories","operator":"NotEquals"},{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Storage/storageAccounts","targetValue":"Microsoft.IoTCentral/IoTApps","operator":"NotEquals"}]},"policyDefinitionId":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyDefinitions/ad14bdb6-1405-40f3-8e13-96b56d70251e","policyDefinitionName":"ad14bdb6-1405-40f3-8e13-96b56d70251e","policyDefinitionEffect":"deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/c2fa07b5891b4e31baff87a9","policyAssignmentName":"c2fa07b5891b4e31baff87a9","policyAssignmentDisplayName":"Allowed locations – Exclude IoTCentral","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs"}}]}}
Can’t create a storage account. Please try again.
1 Answers
Hi Budezeddin,
To make sure costs are managed and we can maintain the lab infrastructure, only certain regions are allowed for creating resources. For your example, the key line of the output is
[{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":["canadaeast","centralindia","centralus","eastasia","eastus","eastus2","germanynorth","germanywestcentral","global","japanwest","koreacentral","koreasouth","northcentralus","southcentralus","southindia","westcentralus","westindia","westus","westus2"],"operator":"NotIn"},Which says that you tried to create a storage account in "southeastasia", but that isn’t in the allowed list of regions.
Try creating a storage account in one of the regions above, and you should be sweet.
Cheers,
Lars