AdventureWorksLT' was disallowed by policy.

RequestDisallowedByPolicy means an Azure Policy assignment is blocking creation of that resource.

Use the policy name from the error, DP800-9V2, to identify what rule is being enforced, then either make the deployment comply with that policy or, if permitted, create an exemption.

Recommended steps:

1. Find the blocking policy details.
   • In Azure portal, go to Policy > Assignments.
   • Locate the assignment named DP800-9V2.
   • Open it and review the policy definition, scope, and parameters.
2. Check what the policy denies.
   • Review the policy rules to see whether it restricts resource types, locations, SKUs, public access, or other settings.
   • The policy definition and assignment named in the error are the key items to inspect.
3. Update the deployment to comply.
   • If the rule requires specific settings, change the resource configuration to match them.
   • Example: if the policy requires public network access to be disabled, update the resource properties accordingly.
4. If the resource must be allowed and permissions exist, create an exemption.
   • In Policy > Assignments, open the assignment.
   • Select Create exemption.
   • Choose the exempted subscope, enter the exemption details, then create it.
5. If the policy is intended to allow only certain resource types, an administrator can edit the assignment parameters instead of exempting it.
   • This affects all resources in that policy scope, so it should be done carefully.

CLI options to inspect the policy:

az policy definition show --name {policy-name}
az policy assignment show --name {assignment-name} --resource-group {resource-group-name}

PowerShell options to inspect the policy:

$subid = (Get-AzContext).Subscription.Id
$defname = "<policy definition name>"
(Get-AzPolicyDefinition -Id "/subscriptions/$subid/providers/Microsoft.Authorization/policyDefinitions") |
  Where-Object -Property Name -EQ -Value $defname |
    ConvertTo-Json -Depth 10

$rg = Get-AzResourceGroup -Name "<resource group name>"
$assignmentname = "<policy assignment name>"
Get-AzPolicyAssignment -Name $assignmentname -Scope $rg.ResourceId | ConvertTo-Json -Depth 5

If this is a lab or training environment, the policy is commonly intentional and the fix is to deploy only resources and settings allowed by that assignment.

• Resolve errors for request disallowed by policy
• Tutorial: Disallow resource types in your cloud environment