UNUSUAL ACTIVITY - FULL DENIAL ASSIGNMENT LOCK

Question

Hello Microsoft Azure Support,

I’m unable to create any resources in my Azure for Students subscription due to a system-applied deny assignment.

Error shown by the portal/ARM:

code: DenyAssignmentAuthorizationFailed

message: The client '

Answer 1

It appears that you are encountering a DenyAssignmentAuthorizationFailed error due to a system-applied deny assignment labeled [UNUSUALACTIVITY] FULL DENY ASSIGNMENT ON / FOR ALL USERS ADDED. This deny assignment is blocking all write operations in your Azure for Students subscription, preventing you from creating or modifying any resources.

Deny assignments in Azure override RBAC permissions, which is why even though you have Owner/Contributor permissions, you are unable to perform actions that are restricted by the deny assignment. Since deny assignments are managed by Azure, you cannot remove or modify them directly.

To resolve this issue, you should contact Azure support directly. They will be able to review the deny assignment and determine if it is a false positive or if there are any corrective actions required to re-enable resource creation in your subscription. Be prepared to provide any additional verification they may need to assist you.

---

References:

• RequestDisallowedByPolicy
• List Azure deny assignments

Answer 2

Hello SHREEYANSH SWAROOP SAXENA,

You’re using an Azure for Students subscription and when trying to create resources, you’re blocked by a system-applied deny assignment. The portal/ARM shows the error: "code: DenyAssignmentAuthorizationFailed" This means Azure is actively preventing your account from creating resources.

Azure for Students subscriptions have strict quotas and restrictions. A deny assignment is a system-level policy that explicitly prevents certain actions, regardless of your role. This is different from RBAC (role-based access control); deny assignments override permissions. This issue commonly caused because of subscription expiration, credits exhausted, or policy restrictions tied to the student offer.

 Follow the below steps to resolve this issue.

1. Check subscription status:
   • Go to Azure Portal > Subscriptions > Azure for Students.
   • Verify if the subscription is Active or Disabled/Expired.
2. Check credits:
   • In the subscription overview, confirm if your free credits are exhausted.
   • If credits are used up, resource creation is blocked until you upgrade.
3. Check the deny assignments:

• Go to Azure Portal > Subscription__Navigate to Access control (IAM) > Deny assignments.
• If you see system-applied deny assignments, they cannot be removed manually. List Azure deny assignments - Azure RBAC | Microsoft Learn

1. Upgrade subscription: If your student subscription expired or credits are exhausted, If you want to continue you can upgrade to a Pay-As-You-Go subscription to continue creating resources. This requires adding a valid payment method.

If you need additional help, you can create the support request. Kindly check the below documentation for more details: How to create an Azure support request - Azure supportability | Microsoft Learn

Hope this helps! If you encounter any issues, please reach out to us. Thanks.