Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
0 answers
We have OpenAPI Spec OAS 3.0.0 contains complexities like AllOf, AnyOff, #ref OneOf and want to valicate-contnent for request and response Its not working
We have OpenAPI Spec OAS 3.0.0 contains complexities like AllOf, AnyOff, #ref OneOf and want to valicate-contnent for request and response Its not working. and says complex things like AllOf, AnyOff, #ref OneOf doesn't work in validate-content APIM…
Azure Policy
asked 2026-07-01T08:33:44.6233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 28.999999999999996%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKP%3C/text%3E%3C/svg%3E)
Kambar, Praveen kumar N
0
Reputation points
commented 2026-07-01T08:36:28.3666667+00:00
Kambar, Praveen kumar N
0
Reputation points
1 answer
Not getting the excludedActions on an Azure Bluerprint to work
Hi all, I'm deploying a Blueprint that contains a Recovery Services Vault. That Blueprint gets the read only lock. Now I want others, who are contributor on the particular resource group, to be able to still add a machine to that Recovery Services…
Azure Blueprints
Azure Blueprints
An Azure service that provides templates for quick, repeatable creation of fully governed cloud subscriptions.
75 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2021-03-23T10:26:34.58+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 97%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EES%3C/text%3E%3C/svg%3E)
Erwin Staal
6
Reputation points MVP
answered 2026-06-29T21:14:05.8966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 67%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETT%3C/text%3E%3C/svg%3E)
Torrey Trahanovsky
0
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
Azure for Students subscription blocked by “Allowed resource deployment regions” policy (Deny effect) — cannot create Storage Account
I am using an Microsoft Azure** for Students subscription** and unable to create a Storage Account due to a policy error. Whenever I try to deploy a resource in any region (East US, Central India, Southeast Asia, etc.), it fails with: “Resource was…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-03-21T14:51:04.5733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 36%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKT%3C/text%3E%3C/svg%3E)
Krishna Tyagi
20
Reputation points
commented 2026-06-26T22:29:56.6933333+00:00
TP
158.4K
Reputation points
Volunteer Moderator
2 answers
One of the answers was accepted by the question author.
My Azure for Students account won’t let me deploy resources in any region — what should I do?
Hi everyone, I’m using an Azure for Students subscription, and I’m unable to deploy any resources in any region. Every time I try, I get the following error: "This policy maintains a set of best available regions where your subscription can deploy…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2025-10-21T21:10:37.3266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 81%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E2%3C/text%3E%3C/svg%3E)
20250023
50
Reputation points
edited an answer 2026-06-26T17:29:34.6833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 89%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEM%3C/text%3E%3C/svg%3E)
Emilia Mølnå
21
Reputation points
2 answers
RequestDisallowedByAzure: Allowed resource deployment regions policy is completely empty for my Student Subscription
I am getting RequestDisallowedByAzure on my Azure for Students subscription (ID: PII removed) no matter what region I select. I ran this in Cloud Shell: az policy assignment list -- query "[? policyDefinitionId ==…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-06-19T10:19:35.5666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 7.000000000000001%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA_%3C/text%3E%3C/svg%3E)
anes-_- انس
0
Reputation points
commented 2026-06-26T11:29:57.1233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 68%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBY%3C/text%3E%3C/svg%3E)
Bharath Y P
10,180
Reputation points Microsoft External Staff
Moderator
0 answers
Join: Microsoft Azure Q&A Champions Program
The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-25T22:59:20.9366667+00:00
Ashley Swearingen
0
Reputation points Microsoft External Staff
Moderator
edited the question 2026-06-23T19:40:01.3466667+00:00
Ashley Swearingen
0
Reputation points Microsoft External Staff
Moderator
3 answers
Disable user ability to create subscriptions
I want to have full control of all subscription creations in my tenant. If I disable the ability of end users to create new subscriptions in my tenant, how would subscriptions be created going forward and what would be negatively impacted? (Is…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-06-08T19:06:38.97+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 57.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ5%3C/text%3E%3C/svg%3E)
JayCarper-5747
396
Reputation points
commented 2026-06-22T04:39:25.7733333+00:00
Bharath Y P
10,180
Reputation points Microsoft External Staff
Moderator
3 answers
How can deny storage account creation if a Private Endpoint is not created at the same time
Hello, Looking for a solution to create Azure policy to deny storage account creation if a Private Endpoint is not created at the same time. Thanks, Srinath.
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-29T01:51:14.0733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 61%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Srinath Sarman
0
Reputation points
commented 2026-06-12T16:59:07.8566667+00:00
Jose Benjamin Solis Nolasco
9,451
Reputation points
Volunteer Moderator
1 answer
One of the answers was accepted by the question author.
Nist 800-171 rev 2 policy assignment error - Subnets should be associted with a network security group
Hello I am running NIST policy 800-171 rev 2 against my tenant and its failing compliance check for Azurefirewallmanagementsubnet subnet with error "Subnets should be associated with a network security group". When I try to associate subnet…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-06-12T13:52:12.1633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 31%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Amit Raghav
40
Reputation points
accepted 2026-06-12T14:46:09.8433333+00:00
Amit Raghav
40
Reputation points
3 answers
One of the answers was accepted by the question author.
Subscription management | Region access
Hi everyone, My Azure for Students subscription is restricted by the ‘Allowed resource deployment regions’ policy. I need help or confirmation of which regions are enabled for Foundry projects or assistance enabling one supported region. Thank you for…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-06-10T10:51:14.0133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 81%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPJ%3C/text%3E%3C/svg%3E)
Philip J Dolo
20
Reputation points
answered 2026-06-10T13:29:50.6533333+00:00
TP
158.4K
Reputation points
Volunteer Moderator
3 answers
Deny policy
I have this den policy [ "parameters": { "effect": { "type": "String", "metadata": { "displayName": "Effect", "description":…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-29T07:48:22.2066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 11%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMJ%3C/text%3E%3C/svg%3E)
moti jirata
25
Reputation points
edited an answer 2026-06-10T01:42:04.21+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 22%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELR%3C/text%3E%3C/svg%3E)
Lakshma Reddy Vattijonnala
1,005
Reputation points Microsoft External Staff
Moderator
1 answer
One of the answers was accepted by the question author.
Azure policy - how to apply a policy on specific resources
Hello, I would like to test the new CIS Security Benchmarks for Windows Server by deploying the policy but only on a few resources. (arc onboarded machines) How is this possible ? In the Basics of the policy assignment, you can choose the scope but…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-06-02T07:39:03.2+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 44%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
MarcVanderhaegen
306
Reputation points
accepted 2026-06-05T09:49:50.3366667+00:00
MarcVanderhaegen
306
Reputation points
3 answers
How to get Region for use of resoursecs
I am unable to use any resources in my Azure student account. In my assignment policy, there is no region where I can use resources as attached. How do I go about this.
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-30T15:19:51.29+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 65%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Roy Mugo
0
Reputation points
answered 2026-06-02T11:55:43.2333333+00:00
Lakshma Reddy Vattijonnala
1,005
Reputation points Microsoft External Staff
Moderator
1 answer
Unable to install built-in guest configurations in Azure Windows VM
I am using bicep to install some built-in guest configurations in my windows machine. But they are in pending state as in the below screenshot. I suspect I am missing source(ContentUri) in the bicep for those guest configuration assignments. Can anyone…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-20T12:51:30.81+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 4%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Seelam, Bharath
0
Reputation points
commented 2026-06-02T05:10:04.1133333+00:00
Bharath Y P
10,180
Reputation points Microsoft External Staff
Moderator
1 answer
One of the answers was accepted by the question author.
Urgent: Disabled Azure Subscription Affecting Educational Platform
Hello Microsoft Support, My Azure subscription was disabled due to suspected activity. I believe this may be a mistake. This issue is urgent because the subscription hosts services used by our educational platform. We need access to our databases and…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-06-01T23:50:26.7666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 49%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERR%3C/text%3E%3C/svg%3E)
Romarico Roman Ramirez
20
Reputation points
accepted 2026-06-01T23:52:38.88+00:00
Romarico Roman Ramirez
20
Reputation points
3 answers
Azure deny Policy
I am trying to create a deny policy for web apps where the users must have minTls above 1.2 and another policy where the webapp should only accept ['FTPSOnly,Disabled']. But when i assign it it doesnt work and co-polite points out that…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-28T09:37:53.5366667+00:00
moti jirata
25
Reputation points
answered 2026-05-28T17:58:56.05+00:00
Bharath Y P
10,180
Reputation points Microsoft External Staff
Moderator
2 answers
Automation requirement for enabling VM Insights using Azure Policy
We are trying to automate the onboarding of Azure VM Insights monitoring using Azure Policy (DeployIfNotExists) instead of manual configuration through Azure Portal. Currently, VM Insights is enabled manually via: VM → Monitor → Insights → Enable
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-19T13:35:13.6566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 30%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Sree Aravind M
40
Reputation points
commented 2026-05-26T15:44:28.5233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 97%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Suchitra Suregaunkar
15,130
Reputation points Microsoft External Staff
Moderator
6 answers
One of the answers was accepted by the question author.
how to fix You do not have permissions to create resource groups under subscription
You do not have permission to create resource groups under subscription
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2024-03-15T14:30:07+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 11%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJW%3C/text%3E%3C/svg%3E)
Jeffrey Wilds
25
Reputation points
edited the question 2026-05-17T09:46:23.1833333+00:00
Gérard Oomens
124.9K
Reputation points
Volunteer Moderator
2 answers
One of the answers was accepted by the question author.
Azure Subscription disabled due to suspecious activity
I am using Azure Services to host application. I am kind of new to azure and might have done something against the Azure Policy. I have raised a case already but posting this to know what to do to enable my subscrition apart from waiting for an agent to…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-05-11T00:01:58.8766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 36%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAL%3C/text%3E%3C/svg%3E)
Abel Lambea
25
Reputation points
accepted 2026-05-14T00:55:42.2466667+00:00
Abel Lambea
25
Reputation points
2 answers
Enable Azure Policy to Automatically Configure Log Analytics and VM Insights Across Subscriptions via Management Group Scope
We are building a multi-cloud FinOps application where we collect performance and cost metrics from Azure resources. Currently, we are programmatically enabling diagnostic settings and monitoring configurations using APIs for specific resource…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,221 questions
asked 2026-04-24T05:56:16.4766667+00:00
Sree Aravind M
40
Reputation points
commented 2026-05-13T22:05:27.8466667+00:00
Bharath Y P
10,180
Reputation points Microsoft External Staff
Moderator