Using Accelerators to deploy Azure Resources but failed at azure container registry task setup

Question

Hi Team,

I came across a documentation, related to Azure Landing Zones to deploy managment group setup and other resources using azure accelerators.
I have followed this documentation and tried to setup only Azure Verified Modules for Platform Landing zones with lib folder. and followed every step that i can do and provided required permissions.

Accelerator will do all terraform planning till apply.

Currently im using azure free subscription - trial version.

Reference Link : https://azure.github.io/Azure-Landing-Zones/accelerator/userguide/

But i'm getting below issue

Error: creating Task (Subscription: "28bfc43e-2902-41d9-a305-0b2b491204c1"

│ Resource Group Name: "rg-alz-mgmt-agents-eastus-001"

│ Registry Name: "acralzmgmteas001qomk"

│ Task Name: "image-build-task"): performing Create: unexpected status 400 (400 Bad Request) with error: TasksOperationsNotAllowed: ACR Tasks requests for the registry acralzmgmteas001qomk and 28bfc43e-2902-41d9-a305-0b2b491204c1 are not permitted. Please file an Azure support request at http://aka.ms/azuresupport for assistance.

│

│ with module.azure.azurerm_container_registry_task.alz[0],

│ on ../../modules/azure/container_registry.tf line 12, in resource "azurerm_container_registry_task" "alz":

│ 12: resource "azurerm_container_registry_task" "alz" {

│

│ creating Task (Subscription: "28bfc43e-2902-41d9-a305-0b2b491204c1"

│ Resource Group Name: "rg-alz-mgmt-agents-eastus-001"

│ Registry Name: "acralzmgmteas001qomk"

│ Task Name: "image-build-task"): performing Create: unexpected status 400 (400 Bad Request) with error: TasksOperationsNotAllowed: ACR Tasks requests

│ for the registry acralzmgmteas001qomk and 28bfc43e-2902-41d9-a305-0b2b491204c1 are not permitted. Please file an Azure support request at

│ http://aka.ms/azuresupport for assistance.

╵

Answer 1

Hello Pavan Kalyan Muniganti,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that you are using accelerators to deploy Azure Resources but failed at azure container registry task setup.

Regarding your error statement! Since you're currently on a Free Trial, ACR Tasks are not available under your subscription tier. However, you can work around this limitation by manually using az acr build or integrating GitHub Actions into your workflow. If you're not actively using the Azure Container Registry for deployments, it's also safe to disable the ACR Task module in your Terraform configuration, as it's not essential in every scenario. For production environments or more comprehensive testing, consider upgrading to a Pay-As-You-Go plan.

A practical approach during the trial period is to skip the ACR Task in Terraform by using count = var.enable_acr_task ? 1: 0, and instead automate your image builds with az acr build or GitHub Actions. This allows you to maintain your deployment pipeline and automation without needing to upgrade immediately, while staying within the limits of the Free Trial.

These three methods could be very helpful:

• Disable ACR Task (With Conditional Logic).
• Maintain Build Automation Without ACR Tasks by manual CLI Build or GitHub Actions.
• Upgrade to Pay-As-You-Go (Optional but Ideal).

I hope this is helpful! Do not hesitate to let me know if you have any other questions or clarifications.

---

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful.