Azure for Students blocked by system-protected [UNUSUALACTIVITY] deny assignment and support request cannot be submitted

Question

Azure for Students blocked by system-protected [UNUSUALACTIVITY] deny assignment and support request cannot be submitted

Kunasin LAYSAK 0

Hello, My newly activated Azure for Students subscription is Enabled and has available credit, but all Azure write operations are blocked by a Microsoft system-protected root-scope deny assignment: [UNUSUALACTIVITY] FULL DENY ASSIGNMENT ON / FOR ALL USERS ADDED Creating a resource group fails with: DenyAssignmentAuthorizationFailed I verified through Azure CLI that the deny assignment has: - isSystemProtected = true - scope = / - actions = * - dataActions = * I also confirmed that my account otherwise has the required RBAC permission. I attempted to create a normal support request through the Azure Portal, but the portal reports that the subscription may be disabled/restricted and does not create the ticket. I also attempted the official Azure Support no-subscription CLI/API path using the Account Review / Security Review Team problem classification, but it returned: InvalidSupportPlan because the account has a Free support plan. Could a Microsoft moderator please help escalate this privately to Azure Subscription Management / Account Review / Security Review Team? I can provide the Subscription ID, Tenant ID, Deny Assignment ID, screenshots, and any required verification through private communication. This subscription is intended only for authorized student development and synthetic testing. No production or customer resources are involved. Thank you.

0 comments

2 answers

Your answer

Answer 1

Hello Kunasin, my name is David and I can assist with your new Azure Student Subscription.

Your Azure Student Subscription is currently locked by a system protected deny assignment applied at the root scope. This is an automated Azure security measure triggered when the platform detects unusual activity patterns.

Why this happens: Azure for Students subscriptions have restricted support and a higher level of fraud-protection sensitivty. When the system flags activity as abnormal, it applies the deny assignment thatblocks all write operations, including creating resource groups, deploying resources or submitting support tickets.

What you can do: As the deny assignment is system protected, it can not be removed through the portal, CLI or RBAC. The only resolution is for the Azure Subscription Management/Account Review Team to manually clear the lock.

Please have your Subscription ID, Tenant ID and the actual Deny Assignment ID ready to pass onto a Microsoft Moderator so they can start the unlock process. Once reviewed, the subscription can be unlocked and you can use it normally again.

Maintain your privacy - Do not post your ID details on here, only give these details to a Microsoft Moderator.

[Moderator edit: Removed part of text advising user to search for a Microsoft moderator and report thread/comment to draw attention to their problem ]

And to put your mind at ease a little....This issue is not caused by anything you did wrong nor does it indicate any type of violation, only that the system has flagged something unusual and protected itself by locking. So hopefully you are back computing in no time.

Hope that helps, all the best.

David.

Answer 2

kagiyama yutaka 5,330

I think a system‑protected deny at “/” can’t be changed from user side, and Azure for Students can’t open technical tickets. the way Azure lets u handle this is sending a no‑subscription Account Review / Subscription Management request, and just letting Azure check the subscription on their side.

0 comments