Getting an error message "RequestDisallowedByPolicy" while trying to create a VM in the azure sandbox subscription (learning).

Question

I am following the steps in the Azure training exercise to create a VM using the Azure CLI command, but I get an error message: "RequestDisallowedByPolicy."

Here are the steps I performed:

1. Created a Microsoft Learn Sandbox as mentioned in the instructions.
2. I opened the Windows command prompt and switched to the folder where I have the bash script.
3. Executed wsl.exe to run a Linux distribution in Windows.
4. logged into the Azure sandbox subscription.
5. Ran the below bash script. az vm create --name msdocs-vm-01 --resource-group <resource-group-name> --image Ubuntu2204 --public-ip-sku Standard --admin-username <userid> --generate-ssh-keys

Detailed error message:

{"error":{"code":"InvalidTemplateDeployment","message":"The template deployment failed with multiple errors. Please see details for more information.","details":[{"code":"RequestDisallowedByPolicy","target":"msdocs-vm-01VMNic","message":"Resource 'msdocs-vm-01VMNic' was disallowed by policy. Policy identifiers: '[{"policyAssignment":{"name":"webapps-assignment","id":"/providers/Microsoft.Management/managementGroups/192fe359-e72a-fa7e-dcd5-95e985e7eac9/providers/Microsoft.Authorization/policyAssignments/webapps-assignment"},"policyDefinition":{"name":"Allowed resource types","id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","version":"1.0.0"},"policySetDefinition":{"name":"webapps-initiative","id":"/providers/Microsoft.Management/managementGroups/learn-sandbox-prod/providers/Microsoft.Authorization/policySetDefinitions/webapps-initiative","version":"1.0.0"}}]'.","additionalInfo":[{"type":"PolicyViolation","info":{"evaluationDetails":{"evaluatedExpressions":[{"result":"False","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Network/networkInterfaces","targetValue":["Microsoft.ApiManagement/service","Microsoft.AlertsManagement/SmartDetectorAlertRules","Microsoft.Cache/Redis","Microsoft.Cdn/profiles","Microsoft.Cdn/profiles/endpoints","Microsoft.DBforMySQL/flexibleServers","Microsoft.DBforPostgreSQL/servers","Microsoft.DBforPostgreSQL/serversv2","Microsoft.ContainerRegistry/registries","Microsoft.ContainerRegistry/registries/webhooks","Microsoft.DocumentDB/databaseAccounts","microsoft.insights/actiongroups","microsoft.insights/components","microsoft.insights/metricAlerts","Microsoft.insights/workbooks","Microsoft.KeyVault/vaults","Microsoft.Logic/workflows","Microsoft.MixedReality/remoteRenderingAccounts","Microsoft.Network/connections","Microsoft.Network/localNetworkGateways","Microsoft.Network/networkSecurityGroups","Microsoft.Network/publicIPAddresses","Microsoft.Network/trafficmanagerprofiles","Microsoft.Network/virtualNetworkGateways","Microsoft.Network/virtualNetworks","Microsoft.OperationalInsights/workspaces","Microsoft.Portal/dashboards","Microsoft.Relay/namespaces","Microsoft.Resources/resourceGroups","Microsoft.Search/searchServices","Microsoft.Security/automations","Microsoft.ServiceBus/namespaces","Microsoft.ServiceBus/namespaces/authorizationrules","Microsoft.ServiceBus/namespaces/queues","Microsoft.ServiceBus/namespaces/queues/authorizationrules","Microsoft.ServiceBus/namespaces/topics","Microsoft.ServiceBus/namespaces/topics/authorizationrules","Microsoft.ServiceBus/namespaces/topics/subscriptions","Microsoft.ServiceBus/namespaces/topics/subscriptions/rules","Microsoft.SignalRService/SignalR","Microsoft.SignalRService/WebPubSub","Microsoft.Sql/servers","Microsoft.Sql/servers/databases","Microsoft.Storage/storageAccounts","Microsoft.Web/certificates","Microsoft.Web/connections","Microsoft.Web/customApis","Microsoft.Web/serverFarms","Microsoft.Web/serverfarms/workers","Microsoft.Web/sites","Microsoft.Web/sites/instances","Microsoft.Web/sites/metricdefinitions","Microsoft.Web/sites/metrics","Microsoft.Web/sites/slots","Microsoft.Web/sites/slots/instances","Microsoft.Web/sites/slots/metricdefinitions","Microsoft.Web/sites/slots/metrics","Microsoft.Web/staticSites"],"operator":"In"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","policySetDefinitionId":"/providers/Microsoft.Management/managementGroups/learn-sandbox-prod/providers/Microsoft.Authorization/policySetDefinitions/webapps-initiative","policyDefinitionReferenceId":"allowed-resource-types_1","policySetDefinitionName":"webapps-initiative","policySetDefinitionDisplayName":"webapps-initiative","policySetDefinitionVersion":"1.0.0","policyDefinitionName":"a08ec900-254a-4555-9bf5-e42af04b5c5c","policyDefinitionDisplayName":"Allowed resource types","policyDefinitionVersion":"1.0.0","policyDefinitionEffect":"deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/192fe359-e72a-fa7e-dcd5-95e985e7eac9/providers/Microsoft.Authorization/policyAssignments/webapps-assignment","policyAssignmentName":"webapps-assignment","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/192fe359-e72a-fa7e-dcd5-95e985e7eac9","policyAssignmentParameters":{},"policyExemptionIds":[],"policyEnrollmentIds":[]}}]},{"code":"RequestDisallowedByPolicy","target":"msdocs-vm-01","message":"Resource 'msdocs-vm-01' was disallowed by policy. Policy identifiers: '[{"policyAssignment":{"name":"webapps-assignment","id":"/providers/Microsoft.Management/managementGroups/192fe359-e72a-fa7e-dcd5-95e985e7eac9/providers/Microsoft.Authorization/policyAssignments/webapps-assignment"},"policyDefinition":{"name":"Allowed resource types","id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","version":"1.0.0"},"policySetDefinition":{"name":"webapps-initiative","id":"/providers/Microsoft.Management/managementGroups/learn-sandbox-prod/providers/Microsoft.Authorization/policySetDefinitions/webapps-initiative","version":"1.0.0"}}]'.","additionalInfo":[{"type":"PolicyViolation","info":{"evaluationDetails":{"evaluatedExpressions":[{"result":"False","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Compute/virtualMachines","targetValue":["Microsoft.ApiManagement/service","Microsoft.AlertsManagement/SmartDetectorAlertRules","Microsoft.Cache/Redis","Microsoft.Cdn/profiles","Microsoft.Cdn/profiles/endpoints","Microsoft.DBforMySQL/flexibleServers","Microsoft.DBforPostgreSQL/servers","Microsoft.DBforPostgreSQL/serversv2","Microsoft.ContainerRegistry/registries","Microsoft.ContainerRegistry/registries/webhooks","Microsoft.DocumentDB/databaseAccounts","microsoft.insights/actiongroups","microsoft.insights/components","microsoft.insights/metricAlerts","Microsoft.insights/workbooks","Microsoft.KeyVault/vaults","Microsoft.Logic/workflows","Microsoft.MixedReality/remoteRenderingAccounts","Microsoft.Network/connections","Microsoft.Network/localNetworkGateways","Microsoft.Network/networkSecurityGroups","Microsoft.Network/publicIPAddresses","Microsoft.Network/trafficmanagerprofiles","Microsoft.Network/virtualNetworkGateways","Microsoft.Network/virtualNetworks","Microsoft.OperationalInsights/workspaces","Microsoft.Portal/dashboards","Microsoft.Relay/namespaces","Microsoft.Resources/resourceGroups","Microsoft.Search/searchServices","Microsoft.Security/automations","Microsoft.ServiceBus/namespaces","Microsoft.ServiceBus/namespaces/authorizationrules","Microsoft.ServiceBus/namespaces/queues","Microsoft.ServiceBus/namespaces/queues/authorizationrules","Microsoft.ServiceBus/namespaces/topics","Microsoft.ServiceBus/namespaces/topics/authorizationrules","Microsoft.ServiceBus/namespaces/topics/subscriptions","Microsoft.ServiceBus/namespaces/topics/subscriptions/rules","Microsoft.SignalRService/SignalR","Microsoft.SignalRService/WebPubSub","Microsoft.Sql/servers","Microsoft.Sql/servers/databases","Microsoft.Storage/storageAccounts","Microsoft.Web/certificates","Microsoft.Web/connections","Microsoft.Web/customApis","Microsoft.Web/serverFarms","Microsoft.Web/serverfarms/workers","Microsoft.Web/sites","Microsoft.Web/sites/instances","Microsoft.Web/sites/metricdefinitions","Microsoft.Web/sites/metrics","Microsoft.Web/sites/slots","Microsoft.Web/sites/slots/instances","Microsoft.Web/sites/slots/metricdefinitions","Microsoft.Web/sites/slots/metrics","Microsoft.Web/staticSites"],"operator":"In"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","policySetDefinitionId":"/providers/Microsoft.Management/managementGroups/learn-sandbox-prod/providers/Microsoft.Authorization/policySetDefinitions/webapps-initiative","policyDefinitionReferenceId":"allowed-resource-types_1","policySetDefinitionName":"webapps-initiative","policySetDefinitionDisplayName":"webapps-initiative","policySetDefinitionVersion":"1.0.0","policyDefinitionName":"a08ec900-254a-4555-9bf5-e42af04b5c5c","policyDefinitionDisplayName":"Allowed resource types","policyDefinitionVersion":"1.0.0","policyDefinitionEffect":"deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/192fe359-e72a-fa7e-dcd5-95e985e7eac9/providers/Microsoft.Authorization/policyAssignments/webapps-assignment","policyAssignmentName":"webapps-assignment","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/192fe359-e72a-fa7e-dcd5-95e985e7eac9","policyAssignmentParameters":{},"policyExemptionIds":[],"policyEnrollmentIds":[]}}]}]}}

This question is related to the following Learning Module