---
id: 65385d62-1d67-44bb-b7b2-bb9e4d26ec4d
---

# Azure Storage Account Creation Failures

This incident type refers to the occurrence of errors while trying to create a new Azure Storage Account. The error could be due to naming conflicts or invalid characters in the storage account name, or insufficient quotas for storage accounts in the Azure subscription. This can cause disruption to the storage and retrieval of data, affecting the overall functionality of the Azure Storage Account.

### Parameters

```shell
export RESOURCE_GROUP="PLACEHOLDER"
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export USER_OR_GROUP_PRINCIPAL_NAME="PLACEHOLDER"
export SCOPE="PLACEHOLDER"
```

## Debug

### Verify Azure CLI Version

```shell
az --version
```

### List all storage accounts in a resource group

```shell
az storage account list --resource-group ${RESOURCE_GROUP} --output table
```

### Check if the storage account name is available

```shell
az storage account check-name --name ${STORAGE_ACCOUNT_NAME} --query "nameAvailable"
```

### Check Azure Activity Log for Storage Account Creation Events

```shell
az monitor activity-log list --resource-group ${RESOURCE_GROUP} --offset 1h
```

### Check if the storage account name contains any naming conflicts or invalid characters. Ensure that the name adheres to Azure's naming conventions.

```shell
#!/bin/bash

# The name of the Azure storage account to be created
storage_account_name=${STORAGE_ACCOUNT_NAME}

# Check if the storage account name contains any invalid characters
if [[ $storage_account_name =~ [^a-z0-9] ]]; then
  echo "Invalid characters found in the storage account name."
  exit 1
fi

# Ensure that the storage account name adheres to Azure's naming conventions
if [[ ${#storage_account_name} -lt 3 || ${#storage_account_name} -gt 24 ]]; then
  echo "The storage account name must be between 3 and 24 characters long."
  exit 1
fi

if [[ $storage_account_name =~ ^[0-9] ]]; then
  echo "The storage account name cannot start with a number."
  exit 1
fi

if [[ $storage_account_name =~ -[0-9] ]]; then
  echo "The storage account name cannot contain a hyphen followed by a number."
  exit 1
fi

if [[ $storage_account_name =~ [A-Z] ]]; then
  echo "The storage account name must be in lowercase."
  exit 1
fi

echo "The storage account name adheres to Azure's naming conventions."
exit 0
```
## Repair

### Ensure that the user has the necessary permissions to create storage accounts. If not, grant the required permissions.

```shell
#!/bin/bash

# Set the Azure subscription ID and storage account name
resource_group=${RESOURCE_GROUP}
storage_account_name=${STORAGE_ACCOUNT_NAME}
user_or_group_principal_name=${USER_OR_GROUP_PRINCIPAL_NAME}
scope=${SCOPE}

# Set the role assignment name and role definition ID
role_assignment_name="Storage Account Contributor"
role_definition_id=$(az role definition list --name "$role_assignment_name" --query '[].id' --output tsv --resource-group $resource_group)

# Get the object ID of the user or group that needs permissions
object_id=$(az ad user show --id $user_or_group_principal_name --query 'id' --output tsv)

# Assign the role to the user or group
az role assignment create --role $role_definition_id --assignee-object-id $object_id --scope $scope
```

This incident type refers to the occurrence of errors while trying to create a new Azure Storage Account. The error could be due to naming conflicts or invalid characters in the storage account name, or insufficient quotas for storage accounts in the Azure subscription. This can cause disruption to the storage and retrieval of data, affecting the overall functionality of the Azure Storage Account.


```shell
export RESOURCE_GROUP="PLACEHOLDER"
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export USER_OR_GROUP_PRINCIPAL_NAME="PLACEHOLDER"
export SCOPE="PLACEHOLDER"
```


### Verify Azure CLI Version

```shell
az --version
```

### List all storage accounts in a resource group

```shell
az storage account list --resource-group ${RESOURCE_GROUP} --output table
```

### Check if the storage account name is available

```shell
az storage account check-name --name ${STORAGE_ACCOUNT_NAME} --query "nameAvailable"
```

### Check Azure Activity Log for Storage Account Creation Events

```shell
az monitor activity-log list --resource-group ${RESOURCE_GROUP} --offset 1h
```

### Check if the storage account name contains any naming conflicts or invalid characters. Ensure that the name adheres to Azure's naming conventions.

```shell
#!/bin/bash

# The name of the Azure storage account to be created
storage_account_name=${STORAGE_ACCOUNT_NAME}

# Check if the storage account name contains any invalid characters
if [[ $storage_account_name =~ [^a-z0-9] ]]; then
  echo "Invalid characters found in the storage account name."
  exit 1
fi

# Ensure that the storage account name adheres to Azure's naming conventions
if [[ ${#storage_account_name} -lt 3 || ${#storage_account_name} -gt 24 ]]; then
  echo "The storage account name must be between 3 and 24 characters long."
  exit 1
fi

if [[ $storage_account_name =~ ^[0-9] ]]; then
  echo "The storage account name cannot start with a number."
  exit 1
fi

if [[ $storage_account_name =~ -[0-9] ]]; then
  echo "The storage account name cannot contain a hyphen followed by a number."
  exit 1
fi

if [[ $storage_account_name =~ [A-Z] ]]; then
  echo "The storage account name must be in lowercase."
  exit 1
fi

echo "The storage account name adheres to Azure's naming conventions."
exit 0
```


### Ensure that the user has the necessary permissions to create storage accounts. If not, grant the required permissions.

```shell
#!/bin/bash

# Set the Azure subscription ID and storage account name
resource_group=${RESOURCE_GROUP}
storage_account_name=${STORAGE_ACCOUNT_NAME}
user_or_group_principal_name=${USER_OR_GROUP_PRINCIPAL_NAME}
scope=${SCOPE}

# Set the role assignment name and role definition ID
role_assignment_name="Storage Account Contributor"
role_definition_id=$(az role definition list --name "$role_assignment_name" --query '[].id' --output tsv --resource-group $resource_group)

# Get the object ID of the user or group that needs permissions
object_id=$(az ad user show --id $user_or_group_principal_name --query 'id' --output tsv)

# Assign the role to the user or group
az role assignment create --role $role_definition_id --assignee-object-id $object_id --scope $scope
```


Azure Storage Account Creation Failures

Overview

Parameters

Debug

Verify Azure CLI Version

List all storage accounts in a resource group

Check if the storage account name is available

Check Azure Activity Log for Storage Account Creation Events

Check if the storage account name contains any naming conflicts or invalid characters. Ensure that the name adheres to Azure's naming conventions.

Repair

Ensure that the user has the necessary permissions to create storage accounts. If not, grant the required permissions.

Learn more

Related Runbooks

Support