Restrict access policy

Check the student subscription’s Allowed resource deployment regions policy assignment and deploy sayed-blog-publish in one of the regions listed in that assignment.

Find the accepted regions

1. Sign in to the Azure portal using the account associated with the student subscription.
2. Select the correct student subscription in the portal’s Directory + subscriptions filter.
3. Search for Policy.
4. Go to Authoring → Assignments.
5. Set the scope filter to the student subscription.
6. Open the assignment named Allowed resource deployment regions, Allowed locations, or a similar name.
7. Under Parameters, inspect the Allowed locations parameter value.

Those parameter values are the region codes accepted for this specific subscription. Azure for Students region lists can differ between subscriptions, so trying commonly used regions such as East US or West Europe is not a reliable test.^1^

Create the resource again and select one of the listed regions. A region appearing in a resource-creation dropdown does not mean that the subscription policy permits it.^2^

Azure Policy evaluates resource creation against assigned rules, and an Allowed Locations policy with a deny effect blocks resources outside its configured locations.^3^

If an allowed region still fails

Check the complete deployment error in:

Resource group → Deployments → failed deployment → Deployment details

A template can contain several resources, and each resource’s location must comply with the applicable policy. The error details identify the policy assignment and definition responsible; use those names to inspect the precise rule and update the deployment accordingly.^4^

Also verify that the required Azure service is available in at least one of the subscription’s permitted regions. Policy permission and service availability are separate requirements.

If another region is required

The student cannot bypass the subscription-level policy merely by changing RBAC permissions. Azure RBAC can authorize an action while Azure Policy still denies the resulting noncompliant resource.^3^

If none of the allowed regions supports the required service:

1. In the Azure portal, open Help + support.
2. Create a support request explaining the service and required region.
3. Request access to an additional region and include the policy error.

Microsoft documents support requests as the path for customers who have a suitable reason to use a region unavailable under region optimization.^5^

References

1. azure student subscription region error - Microsoft Q&A
2. Azure OpenAI deployment blocked by subscription policy despite supported regions (RequestDisallowedByAzure) - Microsoft Q&A
3. What is Azure Policy?
4. Resolve errors for request disallowed by policy
5. Region optimization for Microsoft Azure customers