An engineer who holds the Contributor role on the resource group RG-Apps tries to deploy a virtual machine into the South India region. The deployment fails immediately, before any resource appears in the portal, with the error code RequestDisallowedByPolicy and HTTP status 403.
The engineer opens a ticket asking to be made an Owner of the subscription. What is actually happening, and what will resolve it?