Unable to create a resource.

Naveen 21 Reputation points
2021-07-12T10:17:13.79+00:00

I get below error.

What does it mean ?
and How can I get to know what Naming Policies are being enforced ?

Many thanks in advance.

{"code":"RequestDisallowedByPolicy","target":"mehtadp200","message":"Resource 'mehtadp200' was disallowed by policy. (Code: RequestDisallowedByPolicy)","additionalInfo":[{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Git commit Hash tag on Azure resource","policySetDefinitionDisplayName":"Tagging for resource group","evaluationDetails":{"evaluatedExpressions":[{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Resources/subscriptions/resourceGroups","targetValue":["Microsoft.Resources/subscriptions/resourceGroups"],"operator":"In"},{"result":"False","expressionKind":"Value","expression":"[take(field('tags[git_commit_hash]'), 6)]","expressionValue":"","targetValue":"......","operator":"Match"}]},"policyDefinitionId":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyDefinitions/tagging-git-commit","policySetDefinitionId":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policySetDefinitions/tagging-resource-group","policyDefinitionReferenceId":"4845430965885124842","policySetDefinitionName":"tagging-resource-group","policyDefinitionName":"tagging-git-commit","policyDefinitionEffect":"Deny","policyAssignmentId":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyAssignments/00251279e9fc4d1ba73e04fa","policyAssignmentName":"00251279e9fc4d1ba73e04fa","policyAssignmentDisplayName":"Tagging for resource group","policyAssignmentScope":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398","policyAssignmentParameters":{}}},{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Git url tag on Azure resource","policySetDefinitionDisplayName":"Tagging for resource group","evaluationDetails":{"evaluatedExpressions":[{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Resources/subscriptions/resourceGroups","targetValue":["Microsoft.Resources/subscriptions/resourceGroups"],"operator":"In"},{"result":"False","expressionKind":"Value","expression":"[take(field('tags[git_url]'), 8)]","expressionValue":"","targetValue":"https://","operator":"Match"},{"result":"False","expressionKind":"Value","expression":"[take(field('tags[git_url]'), 4)]","expressionValue":"","targetValue":"git@","operator":"Match"}]},"policyDefinitionId":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyDefinitions/tagging-git-url","policySetDefinitionId":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policySetDefinitions/tagging-resource-group","policyDefinitionReferenceId":"4312284359211068115","policySetDefinitionName":"tagging-resource-group","policyDefinitionName":"tagging-git-url","policyDefinitionEffect":"Deny","policyAssignmentId":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyAssignments/00251279e9fc4d1ba73e04fa","policyAssignmentName":"00251279e9fc4d1ba73e04fa","policyAssignmentDisplayName":"Tagging for resource group","policyAssignmentScope":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398","policyAssignmentParameters":{}}},{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"RG Naming Standards","evaluationDetails":{"evaluatedExpressions":[{"result":"True","expressionKind":"Field","expression":"type","path":"type","expressionValue":"Microsoft.Resources/subscriptions/resourceGroups","targetValue":"Microsoft.Resources/subscriptions/resourceGroups","operator":"Equals"},{"result":"False","expressionKind":"Value","expression":"[first(skip(split(field('name'), '-'), 1))]","expressionValue":null,"targetValue":"UKS","operator":"MatchInsensitively"},{"result":"False","expressionKind":"Value","expression":"[first(skip(split(field('name'), '-'), 1))]","expressionValue":null,"targetValue":"UKW","operator":"MatchInsensitively"},{"result":"False","expressionKind":"Value","expression":"[first(skip(split(field('name'), '-'), 1))]","expressionValue":null,"targetValue":"EUN","operator":"MatchInsensitively"}]},"policyDefinitionId":"/providers/Microsoft.Management/managementGroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyDefinitions/RG Naming Standards","policySetDefinitionId":"/providers/Microsoft.Management/managementGroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policySetDefinitions/Naming Standards","policyDefinitionReferenceId":"7004565952790260503","policySetDefinitionName":"Naming Standards","policyDefinitionName":"RG Naming Standards","policyDefinitionEffect":"Deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyAssignments/Naming Policies (Global)","policyAssignmentName":"Naming Policies (Global)","policyAssignmentDisplayName":"Naming Policies (Global)","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/3ded2960-214a-46ff-8cf4-611f125e2398","policyAssignmentParameters":{}}}],"policyDetails":[{"isInitiative":true,"assignmentId":"/providers/Microsoft.Management/managementgroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyAssignments/00251279e9fc4d1ba73e04fa","assignmentName":"Tagging for resource group","auxDefinitions":[{"definitionName":"Git commit Hash tag on Azure resource","nonComplianceMessage":null},{"definitionName":"Git url tag on Azure resource","nonComplianceMessage":null}],"viewDetailsUri":"https://portal.azure.com#blade/Microsoft_Azure_Policy/EditAssignmentBladeV2/assignmentId/%2Fproviders%2FMicrosoft.Management%2Fmanagementgroups%2F3ded2960-214a-46ff-8cf4-611f125e2398%2Fproviders%2FMicrosoft.Authorization%2FpolicyAssignments%2F00251279e9fc4d1ba73e04fa"},{"isInitiative":true,"assignmentId":"/providers/Microsoft.Management/managementGroups/3ded2960-214a-46ff-8cf4-611f125e2398/providers/Microsoft.Authorization/policyAssignments/Naming Policies (Global)","assignmentName":"Naming Policies (Global)","auxDefinitions":[{"definitionName":"RG Naming Standards","nonComplianceMessage":null}],"viewDetailsUri":"https://portal.azure.com#blade/Microsoft_Azure_Policy/EditAssignmentBladeV2/assignmentId/%2Fproviders%2FMicrosoft.Management%2FmanagementGroups%2F3ded2960-214a-46ff-8cf4-611f125e2398%2Fproviders%2FMicrosoft.Authorization%2FpolicyAssignments%2FNaming%20Policies%20(Global)"}]}

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
793 questions
0 comments
Accepted answer
  1. Vaibhav Chaudhari 38,576 Reputation points
    2021-07-12T11:35:16.983+00:00

    Looks like there are some policies (like following naming standard for new resource, applying tags etc.) defined which are restricting you to create a resource..

    Open Resource Group > Policies (or Subscription > Policies) - to check the policy details

    113829-image.png

    ----------

    Please don't forget to Accept Answer and Up-vote if the response helped -- Vaibhav

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Naveen 21 Reputation points
    2021-07-12T12:49:59.043+00:00

    thanks.

    the policy is below.
    any help reverse engineering it, please.

    I have tried "m-uks-r01-dp200-RG-learn" but no luck.

    "policyRule": {
    "if": {
    "allOf": [
    {
    "field": "type",
    "equals": "Microsoft.Resources/subscriptions/resourceGroups"
    },
    {
    "anyOf": [
    {
    "not": {
    "value": "[first(field('name'))]",
    "matchInsensitively": "M"
    }
    },
    {
    "not": {
    "anyOf": [
    {
    "value": "[first(skip(split(field('name'), '-'), 1))]",
    "matchInsensitively": "UKS"
    },
    {
    "value": "[first(skip(split(field('name'), '-'), 1))]",
    "matchInsensitively": "UKW"
    },
    {
    "value": "[first(skip(split(field('name'), '-'), 1))]",
    "matchInsensitively": "EUN"
    }
    ]
    }
    },
    {
    "not": {
    "anyOf": [
    {
    "value": "[first(skip(split(field('name'), '-'), 2))]",
    "matchInsensitively": "L##"
    },
    {
    "value": "[first(skip(split(field('name'), '-'), 2))]",
    "matchInsensitively": "R##"
    },
    {
    "value": "[first(skip(split(field('name'), '-'), 2))]",
    "matchInsensitively": "T##"
    }
    ]
    }
    },
    {
    "not": {
    "allOf": [
    {
    "value": "[if(equals(length(split(field('name'), '-')), 6), length(first(skip(split(field('name'), '-'), 3))), 100)]",
    "lessOrEquals": 8
    },
    {
    "value": "[if(greaterOrEquals(length(split(field('name'), '-')), 6), length(first(skip(split(field('name'), '-'), 3))), 0)]",
    "greaterOrEquals": 1
    },
    {
    "value": "[first(skip(split(field('name'), '-'), 4))]",
    "equals": "RG"
    },
    {
    "value": "[if(greaterOrEquals(length(split(field('name'), '-')), 6), length(first(skip(split(field('name'), '-'), 5))), 100)]",
    "lessOrEquals": 8
    },
    {
    "value": "[if(greaterOrEquals(length(split(field('name'), '-')), 6), length(first(skip(split(field('name'), '-'), 5))), 0)]",
    "greaterOrEquals": 1
    }
    ]
    }
    }
    ]
    }
    ]
    },
    "then": {
    "effect": "Deny"
    }

  2. Naveen 21 Reputation points
    2021-07-23T09:27:35.903+00:00

    Reached out to admin and issue resolved.

    Thanks for all the help.

    Regards.

    0 comments