Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
3 answers
How can deny storage account creation if a Private Endpoint is not created at the same time
Hello, Looking for a solution to create Azure policy to deny storage account creation if a Private Endpoint is not created at the same time. Thanks, Srinath.
Azure Policy
asked 2026-05-29T01:51:14.0733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 61%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Srinath Sarman
0
Reputation points
commented 2026-06-12T16:59:07.8566667+00:00
Jose Benjamin Solis Nolasco
8,076
Reputation points
Volunteer Moderator
1 answer
One of the answers was accepted by the question author.
Nist 800-171 rev 2 policy assignment error - Subnets should be associted with a network security group
Hello I am running NIST policy 800-171 rev 2 against my tenant and its failing compliance check for Azurefirewallmanagementsubnet subnet with error "Subnets should be associated with a network security group". When I try to associate subnet…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-06-12T13:52:12.1633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 31%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Amit Raghav
20
Reputation points
accepted 2026-06-12T14:46:09.8433333+00:00
Amit Raghav
20
Reputation points
2 answers
Disable user ability to create subscriptions
I want to have full control of all subscription creations in my tenant. If I disable the ability of end users to create new subscriptions in my tenant, how would subscriptions be created going forward and what would be negatively impacted? (Is…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-06-08T19:06:38.97+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 57.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ5%3C/text%3E%3C/svg%3E)
JayCarper-5747
396
Reputation points
commented 2026-06-10T19:43:26.7233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 97%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Suchitra Suregaunkar
14,435
Reputation points Microsoft External Staff
Moderator
3 answers
One of the answers was accepted by the question author.
Subscription management | Region access
Hi everyone, My Azure for Students subscription is restricted by the ‘Allowed resource deployment regions’ policy. I need help or confirmation of which regions are enabled for Foundry projects or assistance enabling one supported region. Thank you for…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-06-10T10:51:14.0133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 81%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPJ%3C/text%3E%3C/svg%3E)
Philip J Dolo
20
Reputation points
answered 2026-06-10T13:29:50.6533333+00:00
TP
157.2K
Reputation points
Volunteer Moderator
3 answers
Deny policy
I have this den policy [ "parameters": { "effect": { "type": "String", "metadata": { "displayName": "Effect", "description":…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-29T07:48:22.2066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 11%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMJ%3C/text%3E%3C/svg%3E)
moti jirata
20
Reputation points
edited an answer 2026-06-10T01:42:04.21+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 22%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELR%3C/text%3E%3C/svg%3E)
Lakshma Reddy Vattijonnala
505
Reputation points Microsoft External Staff
Moderator
1 answer
One of the answers was accepted by the question author.
Azure policy - how to apply a policy on specific resources
Hello, I would like to test the new CIS Security Benchmarks for Windows Server by deploying the policy but only on a few resources. (arc onboarded machines) How is this possible ? In the Basics of the policy assignment, you can choose the scope but…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-06-02T07:39:03.2+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 44%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
MarcVanderhaegen
306
Reputation points
accepted 2026-06-05T09:49:50.3366667+00:00
MarcVanderhaegen
306
Reputation points
3 answers
How to get Region for use of resoursecs
I am unable to use any resources in my Azure student account. In my assignment policy, there is no region where I can use resources as attached. How do I go about this.
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-30T15:19:51.29+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 65%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Roy Mugo
0
Reputation points
answered 2026-06-02T11:55:43.2333333+00:00
Lakshma Reddy Vattijonnala
505
Reputation points Microsoft External Staff
Moderator
1 answer
Unable to install built-in guest configurations in Azure Windows VM
I am using bicep to install some built-in guest configurations in my windows machine. But they are in pending state as in the below screenshot. I suspect I am missing source(ContentUri) in the bicep for those guest configuration assignments. Can anyone…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-20T12:51:30.81+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 4%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Seelam, Bharath
0
Reputation points
commented 2026-06-02T05:10:04.1133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 68%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBY%3C/text%3E%3C/svg%3E)
Bharath Y P
9,645
Reputation points Microsoft External Staff
Moderator
1 answer
One of the answers was accepted by the question author.
Urgent: Disabled Azure Subscription Affecting Educational Platform
Hello Microsoft Support, My Azure subscription was disabled due to suspected activity. I believe this may be a mistake. This issue is urgent because the subscription hosts services used by our educational platform. We need access to our databases and…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-06-01T23:50:26.7666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 49%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERR%3C/text%3E%3C/svg%3E)
Romarico Roman Ramirez
20
Reputation points
accepted 2026-06-01T23:52:38.88+00:00
Romarico Roman Ramirez
20
Reputation points
3 answers
Azure deny Policy
I am trying to create a deny policy for web apps where the users must have minTls above 1.2 and another policy where the webapp should only accept ['FTPSOnly,Disabled']. But when i assign it it doesnt work and co-polite points out that…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-28T09:37:53.5366667+00:00
moti jirata
20
Reputation points
answered 2026-05-28T17:58:56.05+00:00
Bharath Y P
9,645
Reputation points Microsoft External Staff
Moderator
2 answers
Automation requirement for enabling VM Insights using Azure Policy
We are trying to automate the onboarding of Azure VM Insights monitoring using Azure Policy (DeployIfNotExists) instead of manual configuration through Azure Portal. Currently, VM Insights is enabled manually via: VM → Monitor → Insights → Enable
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-19T13:35:13.6566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 30%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Sree Aravind M
40
Reputation points
commented 2026-05-26T15:44:28.5233333+00:00
Suchitra Suregaunkar
14,435
Reputation points Microsoft External Staff
Moderator
0 answers
Join: Microsoft Azure Q&A Champions Program
The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-25T22:59:20.9366667+00:00
Ashley Swearingen
0
Reputation points Microsoft External Staff
Moderator
answered 2026-05-25T22:59:33.2333333+00:00
AI answer
6 answers
One of the answers was accepted by the question author.
how to fix You do not have permissions to create resource groups under subscription
You do not have permission to create resource groups under subscription
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2024-03-15T14:30:07+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 11%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJW%3C/text%3E%3C/svg%3E)
Jeffrey Wilds
25
Reputation points
edited the question 2026-05-17T09:46:23.1833333+00:00
Gérard Oomens
123.5K
Reputation points
Volunteer Moderator
2 answers
One of the answers was accepted by the question author.
Azure Subscription disabled due to suspecious activity
I am using Azure Services to host application. I am kind of new to azure and might have done something against the Azure Policy. I have raised a case already but posting this to know what to do to enable my subscrition apart from waiting for an agent to…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-11T00:01:58.8766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 36%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAL%3C/text%3E%3C/svg%3E)
Abel Lambea
25
Reputation points
accepted 2026-05-14T00:55:42.2466667+00:00
Abel Lambea
25
Reputation points
2 answers
Enable Azure Policy to Automatically Configure Log Analytics and VM Insights Across Subscriptions via Management Group Scope
We are building a multi-cloud FinOps application where we collect performance and cost metrics from Azure resources. Currently, we are programmatically enabling diagnostic settings and monitoring configurations using APIs for specific resource…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-04-24T05:56:16.4766667+00:00
Sree Aravind M
40
Reputation points
commented 2026-05-13T22:05:27.8466667+00:00
Bharath Y P
9,645
Reputation points Microsoft External Staff
Moderator
2 answers
how to enable SaaS susbscriptions to my azure account or resource group under my account
how to enable SaaS susbscriptions to my azure account or resource group under my account
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-09T11:57:29.61+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 37%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBK%3C/text%3E%3C/svg%3E)
Bharani kumar P
0
Reputation points
commented 2026-05-12T12:47:04.5066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 6%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Siva shunmugam Nadessin
10,895
Reputation points Microsoft External Staff
Moderator
1 answer
One of the answers was accepted by the question author.
Azure student subscription given no allowed resource deployment regions policy
Hello, I recently started my Azure for Students subscription and found that any resource creation was blocked under policy, usually with an error code RequestDisallowedByAzure. Upon further examination to others who have had this problem, it seems that…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 49%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERB%3C/text%3E%3C/svg%3E)
2 answers
One of the answers was accepted by the question author.
View Compliance Details with Azure Resource Graph or Powershell
Hello, I am trying to view compliance details in View Compliance for Policy compliance builtin "Inherit a tag from the resource group" Right now I can see from the portal Reason for non-compliance Current value must be equal to the target…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-05T06:30:46.82+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 69%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETA%3C/text%3E%3C/svg%3E)
Tengku Aiman
120
Reputation points
accepted 2026-05-08T00:22:40.0333333+00:00
Tengku Aiman
120
Reputation points
2 answers
Guest assignment error :- Resource instance with id 'AzureWindowsBaseline' is not found in DSC document.
All of sudden, guest assignments are failing in GCCH tenants. gc_agent.log file seems to suggest something is missing in downloaded package. Is this temporary microsoft issue? Is there a fix for it? [2026-05-05 03:54:35.211] [PID 6916] [TID 9036] [Pull…
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-06T13:29:23.13+00:00
Amit Raghav
20
Reputation points
answered 2026-05-06T17:43:26.17+00:00
Suchitra Suregaunkar
14,435
Reputation points Microsoft External Staff
Moderator
3 answers
One of the answers was accepted by the question author.
Azure Policy View Compliance Detail
Hello, I want to ask whether it is possible to get this data from Azure Resource Graph This is the built-in policy from Azure { "properties": { "displayName": "Inherit a tag from the resource group", …
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,219 questions
asked 2026-05-05T06:18:11.3333333+00:00
Tengku Aiman
120
Reputation points
commented 2026-05-06T03:44:56.1266667+00:00
Siva shunmugam Nadessin
10,895
Reputation points Microsoft External Staff
Moderator