delegated subnet, created by blueprint, does not allow actions of service; blocked by deny assignment

[phwecker]

when creating a vnet via a blueprint, and create a subnet delegated to e.g. app service, a downstream "create vnet integration" operation fails due to the "deny assignment" applied by the blueprint.

is there a way to create a vnet with delegated subnets through blueprints and allow after-the-fact operations by the respective services?