204000 - Azure CLI Not Installed
Agent error code #204000 is legacy. Current agents manage network security groups through the Azure SDK and do not need the Azure CLI, so a current agent does not produce this code.
If you see #204000, the agent is an older version that shelled out to the az binary and could not find it. The fix is to upgrade the agent.
Steps to Resolve
Upgrade the Agent
Update the agent to the current release. The Azure backend then talks to Azure directly, and the Azure CLI is no longer required on the host.
Or Install the Azure CLI for the Older Agent
If you cannot upgrade yet, install the Azure CLI on the agent host, make sure it is on the agent service's PATH, and restart the agent.