title: Azure Batch VNet Integration - Failing to provision nodes
body: <p>I'm trying to provision a Pool of Nodes within Azure Batch and have the nodes join an existing VNet that has other applications sitting inside of it, to no avail... </p>
  
  <p>I have a subnet created and delegated to Azure Batch.</p>
  
  <p>The pool tries to resize and during the first minute or so, it creates the Public IP, Network Security Group and the Load Balancer (all sounds good!). As it reaches the end of the resize timeout duration, those 3 components start to roll-back and get deleted, and the pool never resizes. I'm only trying to provision 1 node in this instance for the purpose of testing.</p>
  
  <p>I'm getting this error in my Resource Group Activity Log each time it tries to provision the nodes, but don't know exactly what it means, nor how to resolve it.
  <code>"errorMessage": "The user did not have permissions to GET the AuditIfNotExists policy's target type 'Microsoft.Security/complianceResults'."</code> It seems to get this error when trying to write to <code>Microsoft.Network/publicIPAddresses</code>. </p>
  
  <p>Other info about setup:</p>
  
  <ul>
  <li>Batch Account Pool Type: Batch Service </li>
  <li>Pool Image: Marketplace - ubuntu-server-container 16-04 Customer </li>
  <li>Container configuration - pulling down Container from ACR Node size: Standard A1_V2 (have tried several others also) </li>
  <li>Dedicated nodes: 1 </li>
  <li>VNet: Existing VNet with dedicated subnet delegated to Microsoft.Batch/batchAccounts</li>
  </ul>
  
  <p>Any advice welcomed!</p>