While creating the Storage for AZURE CLI lab, I got the following error, I tried different name, but got the same error.
Subscription: P2-Real Hands-On Labs Cloud Shell region: Southeast Asia
Resource group: use existing
Storage account: create new File share: create new
Please help, thank you.
Storage creation failed
Error: 403
{"error":{"code":"RequestDisallowedByPolicy","target":"blablabla123","message":"Resource ‘blablabla123’ was disallowed by policy. Policy identifiers: ‘[{"policyAssignment":{"name":"Allowed locations","id":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/47f9111a3dc447249295c3e2"},"policyDefinition":{"name":"Allowed locations","id":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c"}},{"policyAssignment":{"name":"Allowed locations – Exclude IoTCentral","id":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/c2fa07b5891b4e31baff87a9"},"policyDefinition":{"name":"Allowed locations – Exclude IoTCentral","id":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyDefinitions/ad14bdb6-1405-40f3-8e13-96b56d70251e"}}]’.","additionalInfo":[{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Allowed locations","evaluationDetails":{"evaluatedExpressions":[{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":["canadaeast","centralindia","centralus","eastasia","eastus","eastus2","germanynorth","germanywestcentral","global","japanwest","koreacentral","koreasouth","northcentralus","southcentralus","southindia","westcentralus","westindia","westus","westus2"],"operator":"NotIn"},{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":"global","operator":"NotEquals"},{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Storage/storageAccounts","targetValue":"Microsoft.AzureActiveDirectory/b2cDirectories","operator":"NotEquals"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c","policyDefinitionName":"e56962a6-4747-49cd-b67b-bf8b01975c4c","policyDefinitionEffect":"deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/47f9111a3dc447249295c3e2","policyAssignmentName":"47f9111a3dc447249295c3e2","policyAssignmentDisplayName":"Allowed locations","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs","policyAssignmentParameters":{"listOfAllowedLocations":{"value":["canadaeast","centralindia","centralus","eastasia","eastus","eastus2","germanynorth","germanywestcentral","global","japanwest","koreacentral","koreasouth","northcentralus","southcentralus","southindia","westcentralus","westindia","westus","westus2"]}}}},{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Allowed locations – Exclude IoTCentral","evaluationDetails":{"evaluatedExpressions":[{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":["canadaeast","centralindia","centralus","eastasia","eastus","eastus2","germanynorth","germanywestcentral","global","japanwest","koreacentral","koreasouth","northcentralus","southcentralus","southindia","westcentralus","westindia","westus","westus2"],"operator":"NotIn"},{"result":"True","expressionKind":"Field","expression":"location","path":"location","expressionValue":"southeastasia","targetValue":"global","operator":"NotEquals"},{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Storage/storageAccounts","targetValue":"Microsoft.AzureActiveDirectory/b2cDirectories","operator":"NotEquals"},{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Storage/storageAccounts","targetValue":"Microsoft.IoTCentral/IoTApps","operator":"NotEquals"}]},"policyDefinitionId":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyDefinitions/ad14bdb6-1405-40f3-8e13-96b56d70251e","policyDefinitionName":"ad14bdb6-1405-40f3-8e13-96b56d70251e","policyDefinitionEffect":"deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs/providers/Microsoft.Authorization/policyAssignments/c2fa07b5891b4e31baff87a9","policyAssignmentName":"c2fa07b5891b4e31baff87a9","policyAssignmentDisplayName":"Allowed locations – Exclude IoTCentral","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/Vader-Gen2-Labs","policyAssignmentParameters":{"listOfAllowedLocations":{"value":["canadaeast","centralindia","centralus","eastasia","eastus","eastus2","germanynorth","germanywestcentral","global","japanwest","koreacentral","koreasouth","northcentralus","southcentralus","southindia","westcentralus","westindia","westus","westus2"]}}}}]}}
Can’t create a storage account. Please try again.
1 Answers
Looks like you tried to create a Storage Account in the region Southeast Asia, which is not allowed according to the policy defined for this subscription.
Try to use West US maybe?
I’ve had the same issue but in my case EU region was automatically selected probably based on my location. Switching to West US helped to solves the problem. So the question is why we need to use West US?
I suggested "West US" as an example, because it is one among those valid regions to create a Storage Account in this situation. If you read the error message, you will see that, except for two regions of Germany, none of other European regions is valid following the policy of this Subscription.