DenyAssignmentAuthorizationFailed on Azure for Students Subscription

Question

DenyAssignmentAuthorizationFailed on Azure for Students Subscription

Kim Thái Vi Anh 0

Hello, I'm using Azure for Students and I cannot create any resource group or App Service.

The error shown is:

{ "deploymentStatusCode": -1, "stage": 3, "expected": true, "error": { "code": "DenyAssignmentAuthorizationFailed", "message": "The client '@ms.uit.edu.vn' with object id '4001d79e-034d-4b0e-99fd-cdf02408a5cc' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/write' on scope '/subscriptions/4babddff-2125-4afd-baeb-48261ab51de1/resourceGroups/harmonia_gr'; however, the access is denied because of the deny assignment with name '[UnusualActivity] Full Deny assignment on 2dff09ac-2b3b-4182-9953-2b548e0d0b39 for user 00000000-0000-0000-0000-000000000000 at root added' and Id '653ad2b4ae4b4bb3a7e62651f19ddba8' at scope '/'." }, "subscriptionId": "4babddff-2125-4afd-baeb-48261ab51de1", "resourceGroupName": "harmonia_gr", "location": "Southeast Asia", "deploymentName": "Microsoft.Web-WebApp-Portal-f288b008-9393", "details": { "code": "DenyAssignmentAuthorizationFailed", "message": "The client '@ms.uit.edu.vn' with object id '4001d79e-034d-4b0e-99fd-cdf02408a5cc' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/write' on scope '/subscriptions/4babddff-2125-4afd-baeb-48261ab51de1/resourceGroups/harmonia_gr'; however, the access is denied because of the deny assignment with name '[UnusualActivity] Full Deny assignment on 2dff09ac-2b3b-4182-9953-2b548e0d0b39 for user 00000000-0000-0000-0000-000000000000 at root added' and Id '653ad2b4ae4b4bb3a7e62651f19ddba8' at scope '/'." }, "notificationTimestamp": "2025-06-04T17:32:30.909Z"

This blocks all actions even though I have permission on my subscription.

Please help remove the deny assignment so I can continue working on my student project.

Subscription ID: 4babddff-2125-4afd-baeb-48261ab51de1

Region: Southeast Asia

Thank you very much!

Siva Nair 2,420 Reputation points Microsoft External Staff Moderator

2025-06-04T20:09:52.7233333+00:00
Hi Kim Thái Vi Anh,

This error typically occurs when there is a deny assignment in place that restricts your permissions, even though you might have been granted necessary access otherwise.

Here are a few steps you can take to resolve this issue:

Check Current Role Assignments:

Go to the Azure portal and navigate to the "Access control (IAM)" section of your subscription.

Review your current role assignments to ensure you have the necessary permissions.

List Deny Assignments:

In the same "Access control (IAM)" section, select the Deny assignments tab. This will show you if there's a deny assignment affecting your ability to create resources.

Look for the deny assignment with the name mentioned in your error message ([UnusualActivity] Full Deny assignment) and take note of its details.

Request Assistance from an Admin:

Since deny assignments are often managed at a higher administrative level, you may need to contact your Azure subscription administrator or the IT department at your institution. They may be able to remove or modify the deny assignment affecting your access.

Use the Education Hub:

If you continue to face issues, make sure you’re utilizing the Azure Education Hub properly, as it is specifically designed for students and may have additional resources available.

If you have any further assistant, do let me know.
Kim Thái Vi Anh 0 Reputation points

2025-06-05T00:58:23.0233333+00:00

I have confirmed that my account has Owner role on the subscription.

Subscription is active and I verified Deny Assignment under IAM as shown.

Please help escalate or remove the [UnusualActivity] deny assignment so I can proceed with my student project.
Kim Thái Vi Anh 0 Reputation points

2025-06-05T01:16:42.2766667+00:00

This is my first time using Azure for Students. I recently activated my subscription and attempted to create my very first resource (a simple App Service).

However, I immediately received the error:

"DenyAssignmentAuthorizationFailed due to [UnusualActivity] Full Deny assignment at root scope."

I have not created any resource before this attempt, and I have not used any automation tools or scripts. I simply followed the basic steps in the Azure Portal to create a Web App for a student project.

I kindly request your help to remove this deny assignment so I can begin working on my school assignment using Azure.

Thank you very much for your support and understanding!

1 answer

Your answer

Siva Nair 2,420 Reputation points Microsoft External Staff Moderator

2025-06-04T20:09:52.7233333+00:00

Hi Kim Thái Vi Anh,

This error typically occurs when there is a deny assignment in place that restricts your permissions, even though you might have been granted necessary access otherwise.

Here are a few steps you can take to resolve this issue:

Check Current Role Assignments:

Go to the Azure portal and navigate to the "Access control (IAM)" section of your subscription.

Review your current role assignments to ensure you have the necessary permissions.

List Deny Assignments:

In the same "Access control (IAM)" section, select the Deny assignments tab. This will show you if there's a deny assignment affecting your ability to create resources.

Look for the deny assignment with the name mentioned in your error message ([UnusualActivity] Full Deny assignment) and take note of its details.

Request Assistance from an Admin:

Since deny assignments are often managed at a higher administrative level, you may need to contact your Azure subscription administrator or the IT department at your institution. They may be able to remove or modify the deny assignment affecting your access.

Use the Education Hub:

If you continue to face issues, make sure you’re utilizing the Azure Education Hub properly, as it is specifically designed for students and may have additional resources available.

If you have any further assistant, do let me know.
Kim Thái Vi Anh 0 Reputation points

2025-06-05T00:58:23.0233333+00:00

I have confirmed that my account has Owner role on the subscription.

Subscription is active and I verified Deny Assignment under IAM as shown.

Please help escalate or remove the [UnusualActivity] deny assignment so I can proceed with my student project.
Kim Thái Vi Anh 0 Reputation points

2025-06-05T01:16:42.2766667+00:00

This is my first time using Azure for Students. I recently activated my subscription and attempted to create my very first resource (a simple App Service).

However, I immediately received the error:

"DenyAssignmentAuthorizationFailed due to [UnusualActivity] Full Deny assignment at root scope."

I have not created any resource before this attempt, and I have not used any automation tools or scripts. I simply followed the basic steps in the Azure Portal to create a Web App for a student project.

I kindly request your help to remove this deny assignment so I can begin working on my school assignment using Azure.

Thank you very much for your support and understanding!

Answer 1

Siva Nair 2,420 Microsoft External Staff Moderator

Hi Kim Thái Vi Anh,

I understand your concern, to remove this feel free to create a support ticket through portal if support ticket option is available**(?)**. Let me know if you facing issue in creating ticket.

User's image

Siva Nair 2,420 Reputation points Microsoft External Staff Moderator

2025-06-09T17:20:31.5866667+00:00

Hi Kim Thái Vi Anh,

Just checking back if you are able to submit ticket, if you have any questions or concerns please, feel free to post back.

Share via

DenyAssignmentAuthorizationFailed on Azure for Students Subscription

1 answer

Your answer