Private Deployment Subnet Injection Error - Request Feature from support?

[Tim Reilly (timmyreilly)]

AI Foundry Capability Host with VNet injection

Has there been a change to the ai_foundry spec so now I need to request access to "CapabilityHost with CustomerSubnet is not allowed, please reach out to support enable"

Error: Failed to create/update resource

  with module.ai_foundry.azapi_resource.ai_foundry,
  on ../../modules/ai_foundry/main.tf line 7, in resource "azapi_resource" "ai_foundry":
   7: resource "azapi_resource" "ai_foundry" {

creating/updating Resource: (ResourceId
"/subscriptions/bcd954b7-b360-4993-8223-50c04fc1e0f9/resourceGroups/rg-qsss1wp-foundry-dev-hkncp/providers/Microsoft.CognitiveServices/accounts/cog-standard-private-potgv"
/ Api Version "2025-06-01"): GET
https://management.azure.com/subscriptions/bcd954b7-b360-4993-8223-50c04fc1e0f9/providers/Microsoft.CognitiveServices/locations/northcentralus/operationResults/af8052c5-49f7-46a6-be8f-62241d3e62de
--------------------------------------------------------------------------------
RESPONSE 200: 200 OK
ERROR CODE: OperationError
--------------------------------------------------------------------------------
{
  "id": "/subscriptions/bcd954b7-b360-4993-8223-50c04fc1e0f9/providers/Microsoft.CognitiveServices/locations/northcentralus/operationResults/af8052c5-49f7-46a6-be8f-62241d3e62de",
  "name": "af8052c5-49f7-46a6-be8f-62241d3e62de",
  "status": "Failed",
  "startTime": "2026-01-06T23:17:44Z",
  "endTime": "2026-01-06T23:17:50Z",
  "error": {
    "code": "OperationError",
    "message": "Failed to Create the resource. Provisioning state: Failed",
    "details": [
      {
        "code": "ResourceProviderExtensionError",
        "message": "ExtendedErrorInfo:: Kind: AmlRp, Code: BadRequest, Message: {\n  \"error\": {\n    \"code\": \"UserError\",\n    \"severity\": null,\n    \"message\": \"/subscriptions/bcd954b7-b360-4993-8223-50c04fc1e0f9/resourceGroups/rg-qsss1wp-foundry-dev-hkncp/providers/Microsoft.Network/virtualNetworks/vnet-qsss1wp-foundry-dev-hkncp/subnets/agent is invalid\",\n    \"messageFormat\": \"{dataName} is invalid\",\n    \"messageParameters\": {\n      \"dataName\": \"/subscriptions/bcd954b7-b360-4993-8223-50c04fc1e0f9/resourceGroups/rg-qsss1wp-foundry-dev-hkncp/providers/Microsoft.Network/virtualNetworks/vnet-qsss1wp-foundry-dev-hkncp/subnets/agent\",\n      \"1\": \"CapabilityHost with CustomerSubnet is not allowed, please reach out to support enable\"\n    },\n    \"referenceCode\": null,\n    \"detailsUri\": null,\n    \"target\": null,\n    \"details\": [],\n    \"innerError\": {\n      \"code\": \"BadData\",\n      \"innerError\": {\n        \"code\": \"InvalidData\",\n        \"innerError\": null\n      }\n    },\n    \"debugInfo\": null,\n    \"additionalInfo\": null\n  },\n  \"correlation\": {\n    \"operation\": \"b723219a89c1beb2a8b1c6c2077d3df5\",\n    \"request\": \"cd7de39b59e52702\"\n  },\n  \"environment\": \"northcentralus\",\n  \"location\": \"northcentralus\",\n  \"time\": \"2026-01-06T23:17:45.366815+00:00\",\n  \"componentName\": \"agent-management\",\n  \"statusCode\": 400\n}"
      }
    ]
  }
}

"1": "CapabilityHost with CustomerSubnet is not allowed, please reach out to support enable"

Or is it the dataname is wrong?

[rkaickerHOOPP]

Tim Reilly (@timmyreilly) Hey Tim, was this ever resolved for you?