How to start Virtual Machine on Azure for student

Question

How to start Virtual Machine on Azure for student

Tăng Nhật Đăng 5

My current virtual machine on Azure cannot be started to run. When I click start, it says your start process failed because there is a deny assignment named prevent and the scope of that is root(inherited). This is the error code it tells me, why is it that other users in the organization that Azure side set up the whole system and not just for the user caused it. I have configured that virtual machine a lot and it serves my course project. I hope everyone can help me find a solution.

Error code:

Failed to start virtual machine 'ProjectVoIP'. Error: The client '******@ms.uit.edu.vn' with object id 'd3be17e7-67e9-46a5-8e7d-c81b45624f38' has permission to perform action 'Microsoft.Compute/virtualMachines/start/action' on scope 'ProjectVoIP'; however, the access is denied because of the deny assignment with name '[UnusualActivity] Full Deny assignment on 2dff09ac-2b3b-4182-9953-2b548e0d0b39 for user 00000000-0000-0000-0000-000000000000 at root added' and Id '653ad2b4ae4b4bb3a7e62651f19ddba8' at scope '/'.

Kadir SA 120 Reputation points

2024-10-09T16:54:19.6733333+00:00

Since deny assignments take precedence over role assignments in Azure, they explicitly block access to resources.

To resolve this, check for any deny assignments in the Azure portal at the resource, resource group, or subscription level, and remove or modify them if necessary. Review role assignments to ensure the user has the required permissions, such as Virtual Machine Contributor, but remember that deny assignments will always override these permissions. Also, verify any Azure Policies or Management Group policies that might be enforcing deny assignments,
Phạm Nhật Huy 0 Reputation points

2024-10-17T14:25:06.58+00:00

I am currently having the same issue while using my Azure for student subscription. I checked for role assignments, and I was the owner of that subscription. I wonder if this was because of some kind of misconfiguration from either Azure or my university since I used to be able to create such resources just a few weeks ago.

1 answer

Your answer

Kadir SA 120 Reputation points

2024-10-09T16:54:19.6733333+00:00

Since deny assignments take precedence over role assignments in Azure, they explicitly block access to resources.

To resolve this, check for any deny assignments in the Azure portal at the resource, resource group, or subscription level, and remove or modify them if necessary. Review role assignments to ensure the user has the required permissions, such as Virtual Machine Contributor, but remember that deny assignments will always override these permissions. Also, verify any Azure Policies or Management Group policies that might be enforcing deny assignments,
Phạm Nhật Huy 0 Reputation points

2024-10-17T14:25:06.58+00:00

I am currently having the same issue while using my Azure for student subscription. I checked for role assignments, and I was the owner of that subscription. I wonder if this was because of some kind of misconfiguration from either Azure or my university since I used to be able to create such resources just a few weeks ago.

Answer 1

Anonymous

Hi Tăng Nhật Đăng,

Thank you for reaching out to the Microsoft Q&A platform.

Based on your question, description we understand that you are unable to start the VM.

When you try to stop, start, restart, or redeploy an existing VM, the process fails, and you receive an "An unexpected error occurred while processing the network profile of the VM. Please retry later" error message. When this error occurs, the VM is put into a failed state.
Refer the link: Troubleshoot deployment issues with restarting or resizing an existing Windows VM in Azure

Verify if there are any deny assignments in your Azure subscription that might be affecting your permissions. You can do this through the Azure portal by navigating to the Access control (IAM) section of your subscription or resource group.

Please check the activity logs to see if there are any unusual activities or security alerts that might have triggered the deny assignment. This can help you understand why the deny assignment was created.

Check user you are logged in as does not have the required RBAC role for your action.

please refer the below document link for your reference: What is Azure role-based access control (Azure RBAC)?

If an answer has been helpful, please consider accept the answer and "Upvote" to help increase visibility of this question for other members of the Microsoft Q&A community.

User's image

Thank you.

Anonymous

2024-10-15T09:30:54.3833333+00:00

Hello Tăng Nhật Đăng,

Just checking in to see if you had a chance to see my response to your question. Please tell us if it was helpful and feel free to reach out to us if you have any queries.

If you feel that your quires have been resolved, please accept the answer by clicking the "Upvote" and "Accept Answer" on the post.
Anonymous

2024-10-16T09:04:47.1+00:00

Hello Tăng Nhật Đăng,

I wanted to check if you had the opportunity to review the information which was provided in my previous posted answer.

If you feel that your quires have been resolved, please accept the answer by clicking the "Upvote" and "Accept Answer" on the post.
Phạm Nhật Huy 0 Reputation points

2024-10-17T14:24:04.87+00:00

I am currently having the same issue while using my Azure for student subscription. I checked for role assignments, and I was the owner of that subscription. I wonder if this was because of some kind of misconfiguration from either Azure or my university since I used to be able to create such resources (resource groups, public ips, vms, etc) just a few weeks ago.
Anonymous

2024-10-23T02:08:48.5+00:00

Hi Phạm Nhật Huy,

Could you please share us the error message screenshot that you are getting to drive the troubleshoot further.

Thank you.

Share via

How to start Virtual Machine on Azure for student

1 answer

Your answer