我正在尝试创建 Azure 数据工厂并收到错误：RequestDisallowedByPolicy

如何解决我正在尝试创建 Azure 数据工厂并收到错误：RequestDisallowedByPolicy

我发现的错误是：

{
  "code": "InvalidTemplateDeployment","details": [
    {
      "code": "RequestdisallowedByPolicy","target": "adeebadflearning","message": "Resource 'adeebadflearning' was disallowed by policy. Policy identifiers: '[{\"policyAssignment\":{\"name\":\"sqlserver\",\"id\":\"/providers/Microsoft.Management/managementGroups/triplecrown1/providers/Microsoft.Authorization/policyAssignments/4d7e23dc76164960b2c974ac\"},\"policyDeFinition\":{\"name\":\"Allowed resource types\",\"id\":\"/providers/Microsoft.Authorization/policyDeFinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c\"},\"policySetDeFinition\":{\"name\":\"sqlserver\",\"id\":\"/providers/Microsoft.Management/managementGroups/triplecrown1/providers/Microsoft.Authorization/policySetDeFinitions/d5a5d5bb-91e0-4a17-9894-25d0f73aa09f\"}}]'.","additionalInfo": [
        {
          "type": "PolicyViolation","info": {
            "policyDeFinitiondisplayName": "Allowed resource types","policySetDeFinitiondisplayName": "sqlserver","evaluationDetails": {
              "evaluatedExpressions": [
                {
                  "result": "False","expressionKind": "Field","expression": "type","path": "type","expressionValue": "Microsoft.DataFactory/factories","targetValue": [
                    "microsoft.resources/resourcegroups","microsoft.storage/storageaccounts","microsoft.dbforpostgresql/servers","microsoft.sql/servers","microsoft.sql/servers/databases","microsoft.documentdb/databaseaccounts","microsoft.sql/servers/elasticpools","microsoft.dbforMysqL/servers","microsoft.operationalinsights/workspaces","microsoft.operationsmanagement/solutions","microsoft.insights/actiongroups","microsoft.insights/activitylogalerts","microsoft.insights/autoscalesettings","microsoft.insights/metricalerts"
                  ],"operator": "In"
                }
              ]
            },"policyDeFinitionId": "/providers/Microsoft.Authorization/policyDeFinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","policySetDeFinitionId": "/providers/Microsoft.Management/managementGroups/triplecrown1/providers/Microsoft.Authorization/policySetDeFinitions/d5a5d5bb-91e0-4a17-9894-25d0f73aa09f","policyDeFinitionReferenceId": "11619501722087078793","policySetDeFinitionName": "d5a5d5bb-91e0-4a17-9894-25d0f73aa09f","policyDeFinitionName": "a08ec900-254a-4555-9bf5-e42af04b5c5c","policyDeFinitionEffect": "deny","policyAssignmentId": "/providers/Microsoft.Management/managementGroups/triplecrown1/providers/Microsoft.Authorization/policyAssignments/4d7e23dc76164960b2c974ac","policyAssignmentName": "4d7e23dc76164960b2c974ac","policyAssignmentdisplayName": "sqlserver","policyAssignmentScope": "/providers/Microsoft.Management/managementGroups/triplecrown1","policyAssignmentParameters": {}
          }
        }
      ]
    }
  ],"message": "The template deployment Failed because of policy violation. Please see details for more information."
}

解决方法

这意味着为您的资源设置了阻止部署的策略，出于安全原因为项目设置了各种策略，您可以使用以下 PowerShell 查询检查哪个策略阻止了您的部署：

(Get-AzPolicyDefinition -Id "/subscriptions/{guid}/providers/Microsoft.Authorization/policyDefinitions/regionPolicyDefinition").Properties.policyRule | ConvertTo-Json

为了安全或合规性，您的订阅管理员可能会分配限制资源部署方式的策略。例如，您的订阅可能具有阻止创建公共 IP 地址、网络安全组、用户定义的路由或路由表的策略。症状部分中的错误消息显示了策略的名称。要解决此问题，请查看资源政策，并确定如何部署符合这些政策的资源。