Share via

Azure for Students subscription blocked by “Allowed resource deployment regions” policy (Deny effect) — cannot create Storage Account

Krishna Tyagi 20 Reputation points
2026-03-21T14:51:04.5733333+00:00

I am using an Microsoft Azure** for Students subscription** and unable to create a Storage Account due to a policy error.

Whenever I try to deploy a resource in any region (East US, Central India, Southeast Asia, etc.), it fails with:

“Resource was disallowed by Azure: Allowed resource deployment regions policy (Deny effect)”

I checked Azure Policy and found an active “Allowed resource deployment regions” policy assigned at the subscription level, but it appears to block all regions.

I am unable to proceed with any resource creation. Need help understanding why this policy is restricting all regions and how to resolve it or enable at least one region.

Azure Policy
Azure Policy

An Azure service that is used to implement corporate governance and standards at scale for Azure resources.

0 comments No comments

Answer accepted by question author
  1. TP 155.2K Reputation points Volunteer Moderator
    2026-03-21T15:01:51.9833333+00:00

    Hi,

    I don't understand your statement "It appears to block all regions". It should allow five different regions. Please see below and reply back with your findings. Screenshot may be helpful.

    Azure for Students restricts which regions you can deploy resources to. Typically you are restricted to five different regions, and these vary for each person.

    Please navigate to Azure Policy -- Authoring -- Assignments using link below:

    https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Assignments

    Click on assignment named Allowed resource deployment regions

    User's image

    Examine Allowed locations Parameter value for list of regions, similar to below (regions in screenshot are different than yours):

    User's image

    The regions shown in your Parameter value are the ones you are allowed to deploy resources to. Please try to create resources in one of these regions and let me know the results.

    Please click Accept Answer and upvote if the above was helpful.

    Thanks.

    -TP

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Siva shunmugam Nadessin 7,735 Reputation points Microsoft External Staff Moderator
    2026-03-23T08:06:02.1566667+00:00

    Hello Krishna Tyagi,

    Thank you for reaching out to the Microsoft Q&A forum.

    We understand that your Azure for Students subscription has an “Allowed resource deployment regions” policy assigned with no regions in its allowed-locations list—so it’s effectively denying every region. Here’s how to unblock at least one region:

    Identify the blocking policy assignment – In the Azure portal go to Policy → Assignments and locate the “Allowed resource deployment regions” assignment. – Note its name/ID and parameters (you’ll see a parameter named allowedLocations).

    Edit the policy assignment to include at least one region – Select the assignment and click Edit assignment. – Under Parameters, add your desired Azure region(s) (e.g. EastUS, CentralIndia, SoutheastAsia). – Save the assignment.

    1. Retry your deployment – After the assignment updates, go back and create your Storage Account in one of the now-allowed regions.
    2. If you can’t modify the policy yourself – You need Owner or Policy Contributor role to edit assignments. – Contact whoever manages your Azure for Students subscription (or open a support request) and ask them to add allowedLocations to that policy assignment.
    3. (Optional) Use CLI/PowerShell If you prefer scripting, you can:
    # View the assignment 
    az policy assignment show --name <assignment-name> --scope /subscriptions/<subscription-id> 
    
    # Update it with a JSON file specifying allowedLocations 
    az policy assignment update \
    --name <assignment-name> \
      --scope /subscriptions/<subscription-id> \
      --params @params.json
    

    Where params.json contains:

    {
      "properties": {
        "parameters": {
          "allowedLocations": {
            "value": ["eastus","centralindia"]
          }
        }
      }
    }
    

    Reference docs

    Hope this helps unblock your Storage Account deployment!

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.