by using cloudshall get error 403 storage creation faild

Question

Storage creation failed
Error: 403
{"error":{"code":"RequestDisallowedByPolicy","target":"cs11003200215a32b69","message":"Resource 'cs11003200215a32b69' was disallowed by policy. Policy identifiers: '[{\"policyAssignment\":{\"name\":\"Require a tag and its value on resources\",\"id\":\"/subscriptions/ef4db706-5e10-43b0-a910-3a48abfd9c4c/providers/Microsoft.Authorization/policyAssignments/02585d5799924e8b8882503d\"},\"policyDefinition\":{\"name\":\"Require a tag and its value on resources\",\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\"}},{\"policyAssignment\":{\"name\":\"Require a tag and its value on resources\",\"id\":\"/subscriptions/ef4db706-5e10-43b0-a910-3a48abfd9c4c/providers/Microsoft.Authorization/policyAssignments/7765885a3a2248bc96df78e1\"},\"policyDefinition\":{\"name\":\"Require a tag and its value on resources\",\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\"}}]'.","additionalInfo":[{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Require a tag and its value on resources","evaluationDetails":{"evaluatedExpressions":[{"result":"False","expressionKind":"Field","expression":"tags[company]","path":"tags[company]","targetValue":"contaso","operator":"Equals"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62","policyDefinitionName":"1e30110a-5ceb-460c-a204-c1c3969c6d62","policyDefinitionEffect":"deny","policyAssignmentId":"/subscriptions/ef4db706-5e10-43b0-a910-3a48abfd9c4c/providers/Microsoft.Authorization/policyAssignments/02585d5799924e8b8882503d","policyAssignmentName":"02585d5799924e8b8882503d","policyAssignmentDisplayName":"Require a tag and its value on resources","policyAssignmentScope":"/subscriptions/ef4db706-5e10-43b0-a910-3a48abfd9c4c"}},{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Require a tag and its value on resources","evaluationDetails":{"evaluatedExpressions":[{"result":"False","expressionKind":"Field","expression":"tags[company]","path":"tags[company]","targetValue":"contaso","operator":"Equals"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62","policyDefinitionName":"1e30110a-5ceb-460c-a204-c1c3969c6d62","policyDefinitionEffect":"deny","policyAssignmentId":"/subscriptions/ef4db706-5e10-43b0-a910-3a48abfd9c4c/providers/Microsoft.Authorization/policyAssignments/7765885a3a2248bc96df78e1","policyAssignmentName":"7765885a3a2248bc96df78e1","policyAssignmentDisplayName":"Require a tag and its value on resources","policyAssignmentScope":"/subscriptions/ef4db706-5e10-43b0-a910-3a48abfd9c4c"}}]}}
Can't create a storage account. Please try again.

Answer 1

@surya jayanth mandadi Thank you for reaching out to Microsoft Q&A. I understand that you are having issues creating a storage account where it fails with error 403 and message- Require a tag and its value on resources.

This is because, your organization/admin has enforced a required tag and its value on resource groups without which the creation will be denied- Policy Definitions for tag compliance.
Please add a tag to the resource group where you are creating this storage account first and then create the storage account.

Here are Powershell commands to apply a tag - https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources?tabs=json#powershell

Please try this and let me know if this helps. If you have any further questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.