Azure ML Workspace Creation Error on Free Subscription

Marcelo Silva 0 Reputation points
2024-10-23T23:19:54.83+00:00

After starting a 30-day free Azure subscription, an attempt was made to follow the Azure ML Overview training provided by Microsoft and the Brazilian government.

The first step is to create a new "Azure Machine Learning" resource, but a "resource validation error" occurs when trying to create a new storage account. Additionally, an error was encountered while trying to access "Azure Cloud Shell" for the first time:

Subscription: Azure subscription 1 
Resource group: marcams_rsrcgrp 
Storage account: marcams_storage 
File share: marcams_fs 
Region: Brazil South

Error details 
Code: DenyAssignmentAuthorizationFailed 
Message: The client 'marcams@escoladotrabalhador40.com.br' with object id '3b3bbba5-fffd-4990-85b5-c277f2ec86a8' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/write' on scope '/subscriptions/af924acf-d437-4fed-b51e-c9464e939d70/resourceGroups/marcams_rsrcgrp'; however, the access is denied because of the deny assignment with name '[UnusualActivity] Full Deny assignment on 659ce2b8-0714-4198-8c38-dc9b60aabb57 for user 00000000-0000-0000-0000-000000000000 at root added' and Id '552c449e6dfd4afaaedb4203435978b8' at scope '/'. 
Correlation ID: 83a61373-1112-603b-82b2-2ed37cb33a84

What steps can be taken to resolve this issue?

Azure Machine Learning
Azure Machine Learning
An Azure machine learning service for building and deploying models.
2,957 questions
{count} votes

1 answer

Sort by: Most helpful
  1. navba-MSFT 24,905 Reputation points Microsoft Employee
    2024-10-24T05:30:17.0533333+00:00

    @Marcelo Silva Welcome to the Microsoft Q&A Platform.

    .

    The error message you are seeing indicates that there is a deny assignment at the root scope, which is preventing you from creating the resources needed for Azure Machine Learning and accessing Azure Cloud Shell. This deny assignment is likely part of a security policy that prevents certain operations, possibly due to unusual activity detection.

    .

    Here are the steps you can take to resolve this issue:

    1. Review Role Assignments and Deny Assignments
    • Check for Deny Assignments: Navigate to the Azure portal and go to the subscription level. Under "Access Control (IAM)", check for any deny assignments that might be affecting your permissions.
    • Check for Role Assignments: Ensure that your user account has the appropriate role assignments, such as "Owner" or "Contributor", which are necessary to create resources.
    1. Contact your Subscription Administrator

    If you are not the owner or administrator of the Azure subscription, reach out to the subscription administrator to review and modify the deny assignments. The administrator can:

    • Remove or modify the deny assignment that is preventing the resource creation.
    • Ensure that there are no security policies blocking the required actions.
    1. Review Azure Policy
    • Azure Policy Compliance: Check if there are any Azure Policies assigned at the subscription or resource group level that might be causing the denial. You can find this under the "Policy" section in the Azure portal.
    1. Re-attempt Resource Creation

    Once the deny assignment has been addressed, try creating the "Azure Machine Learning" resource and the storage account again.

    Hope this helps.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.