Hi js231,
Thank you for reaching out to us on the Microsoft Q&A forum.
We understand you are experiencing issues creating a VM in the sandbox while working through the module "Describe Azure compute and networking services."
Here are the troubleshooting steps to resolve the issue:
- Sign Out of Existing Azure Portal: Ensure you completely sign out from the Azure portal created in the previous module unit "Exercise - Create an Azure resource," which has an active Microsoft Learn sandbox directory with a Concierge subscription.
- Sign Out of Azure Cloud Shell: Sign out completely from the existing Azure Cloud Shell sandbox or wait until the sandbox activation time expires.
- Activate a New Sandbox: Click on the "Activate Sandbox" button to activate a new sandbox. This will create a default subscription called "Concierge subscription" along with a default resource group name starting with "learn." We recommend using a different browser or an incognito/private window to rule out any browser-related issues.
- Verify Resource Group Name: Sign in to the Azure portal and verify that the resource group name used in the "az vm create" command matches the one displayed in the Azure portal for the sandbox environment.
- Refresh the Sandbox Environment: Since you lack permission to modify the sandbox environment and the error indicates an authorization problem, the most effective solution is to refresh the Microsoft Learn sandbox environment. This will recreate the environment with the appropriate permissions.
- Follow Microsoft Learn Instructions: Follow the instructions provided in the exercise within the Microsoft Learn document. These instructions are tailored for the sandbox environment and often use Cloud Shell commands to avoid permission issues. Ensure you are running the Azure CLI commands in the correct directory (Microsoft Learn Sandbox) and with the correct subscription selected.
Please note that modifying permissions in the Microsoft Learn sandbox is restricted to prevent unintended consequences. The Concierge Subscription is automatically created for sandbox environments to provide necessary resources, and we do not have permission to delete or modify it due to these inherent restrictions.
Also, in a sandbox environment, the access control configurations are pre-set and typically cannot be modified by the user.
If you continue to face issues, please let us know in the comments. We are here to help.
If you find this information helpful, please acknowledge by clicking the "Upvote" and "Accept Answer" buttons on the post.