Storage account deployment blocked by policy across all regions

Question

Unable to deploy any resources (specifically a Storage Account) to my Azure for Students subscription. Resource group creation succeeds in every region tested, but any resource deployment inside those resource groups fails with a policy violation error.

Error received:

Code: InvalidTemplateDeployment

Inner error code: RequestDisallowedByAzure

Message: Resource disallowed by Azure - policy maintains a set of best available regions where your subscription can deploy resources.

Troubleshooting already done:

• Tested deployment across 7+ regions (Central US, East US 2, West US 2, North Europe, UK South, Australia East, Japan East, Southeast Asia) - all fail identically
• Tested with multiple different, globally-unique storage account names - all fail identically
• Resource group creation succeeds without issue in every tested region
• No policy assignments visible at subscription scope (az policy assignment list returns empty)
• Logged in and authenticated successfully via Azure CLI with MFA

Role: Owner on this subscription.

Request: Please confirm whether this subscription has a region/deployment restriction that hasn't fully synced, or advise on how to enable resource deployment.

Answer 1

Hi,

Azure for Students restricts which regions you can deploy resources to. Typically you are restricted to five different regions, and these vary for each person.

Please navigate to Azure Policy -- Authoring -- Assignments using link below:

https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Assignments

Click on assignment named Allowed resource deployment regions

Examine Allowed locations Parameter value for list of regions, similar to below (regions in screenshot are different than yours):

The regions shown in your Parameter value are the ones you are allowed to deploy resources to. Please try to create resources in one of these regions and let me know the results.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP

Answer 2

Azure for Students subscriptions can be restricted by an Azure-managed region policy. In these cases, resource deployment is allowed only in the regions listed in the policy assignment, and attempts outside that list fail with RequestDisallowedByAzure.

Since resource group creation succeeds but resource creation fails, check the subscription policy assignment that controls allowed deployment regions:

1. In Azure portal, go to Policy.
2. Select Assignments.
3. Open the assignment named Allowed resource deployment regions or Allowed locations.
4. Review the Allowed locations parameter value.
5. Deploy the storage account only in one of those listed regions.

For Azure for Students, accepted guidance in similar cases is that the subscription is typically restricted to five allowed regions, and those regions vary per subscription.

If the policy assignment is present but deployments still fail in every listed allowed region, this matches the documented region optimization restriction scenario. In that case, submit a support request in the Azure portal for access to additional or corrected regions.

If a policy assignment name is available from the error details, more information can also be retrieved with Azure CLI:

az policy assignment show --name {assignment-name} --resource-group {resource-group-name}

For policy definition details:

az policy definition show --name {policy-name}

If the blocking policy is identified, review its rules and update the deployment to comply with them.

---

References:

• Fix the "RequestDisallowedByPolicy" error
• Resolve errors for request disallowed by policy
• Region optimization for Microsoft Azure customers
• Azure for Students subscription cannot deploy any Azure resources due to RequestDisallowedByAzure policy - Microsoft Q&A
• Azure for Students subscription blocked by “Allowed resource deployment regions” policy (Deny effect) — cannot create Storage Account - Microsoft Q&A
• My deployment failed because Azure policies disallowed resource creation in the selected region, restricting deployments to approved regions only. - Microsoft Q&A