Deny assignment problem.

Question

I am trying to create a Resource Group in Azure. When I click "Create" I get the following:

{

"error": {

"code": "DenyAssignmentAuthorizationFailed",

"message": "The client '******@aclamex.com' with object id 'c12afcae-b268-421d-8dc0-3676a2d44340' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/write' on scope '/subscriptions/bc6f9575-c774-4441-8a1e-c0202752490f/resourceGroups/Aclamex'; however, the access is denied because of the deny assignment with name '[UnusualActivity] Full Deny assignment on tenant 54981704-505e-42e0-958d-72a9adc6da2f for user c12afcae-b268-421d-8dc0-3676a2d44340 at root added' and Id '3cdb3c5361f140309d27afe9bf1c73cc' at scope '/'."

}

}

How do I remove my ID from the deny list?

.... Warren

Answer 1

Hey there, Warren Pickell

The error message you have posted looks to be because Azure has detected unusual activity. This has made the portal block your request to create a resource group. I am getting this from the following error,

The client '...@aclamex.com' with object id '...' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/write' on scope '/subscriptions/.../resourceGroups/Aclamex'; however, the access is denied because of the deny assignment with name '[UnusualActivity]

Please can you open an Azure support ticket through the portal by signing into your account here: https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade

The support team will be able to have a look on their end. If you have trouble with this, I believe the Microsoft external staff moderators are able to help with this too.

Thanks,
Nathan