failed using New-AzManagementGroupDeployment -Location "China East 3"

Hello Gallatin 21V,

Thank you for posting your query on Microsoft Q&A platform.

The -Location parameter in New-AzManagementGroupDeployment defines where Azure Resource Manager stores the deployment data, not where your actual resources are deployed. It is strictly for the deployment record location.

Supported deployment storage regions: Supported regions for storing deployment data in Azure China, the permissible deployment locations are limited. Only specific regions are allowed for the -Location parameter even if others are available for resource provisioning.
For example, if your error lists regions like chinaeast2, chinanorth3, chinaeast, chinanorth, and chinanorth2, these are the only ones you can use in the -Location argument even if China East 3 is available for your actual resources.

The below document page lists all Azure regions in China including China East 3 and flags it as an access-restricted region.
(https://learn.microsoft.com/en-us/azure/china/overview-regions)

Separating deployment storage location from resource location: When targeting deployment at the management group level, you must use one of the allowed regions ("chinaeast2") in the -Location parameter.

Inside your ARM or Bicep template, define the actual resource location ("China East 3").

This structure ensures your deployment information is stored in a valid region while your resources are deployed where you intend.

New-AzManagementGroupDeployment -Location: Stores the deployment metadata but not resource placement.

Reference:

1. https://docs.azure.cn/en-us/azure-resource-manager/templates/deploy-to-management-group?tabs=azure-cli
2. https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azmanagementgroupdeployment

Thanks,

Suchitra.