Select Language:
If you’ve recently deleted a Web App in Azure but find yourself unable to delete the Virtual Network or Resource Group, don’t worry—you’re not alone. This happens because Azure App Service leaves behind a hidden connection called a Network Intent Policy or Service Association Link (SAL) on the subnet. This link helps maintain the integration between the Web App and the network, but it also locks the subnet, preventing further changes or deletions.
To fix this issue, you need to break that connection. Here’s a simple step-by-step guide on how to do it using Azure CLI and, if needed, a quick workaround through the Azure Portal.
First, open your Azure CLI or Cloud Shell. The commands below will remove the network policies and delegations that Azure uses to keep the subnet linked to your Web App.
Start by checking and removing the Network Intent Policy:
bash
az network vnet subnet update \
–resource-group
–vnet-name
–name
–remove networkIntentPolicy
Next, clear any subnet delegations:
bash
az network vnet subnet update \
–resource-group
–vnet-name
–name
–remove delegations
Run these commands, replacing the placeholder text with your actual resource group name, virtual network name, and subnet name. Once completed successfully, try deleting your resource group again. This should release the lock and allow you to proceed.
If you encounter errors with these commands or prefer not to use CLI, there’s a simple workaround using a temporary Web App. Here’s what to do:
1. Create a new, inexpensive Web App (Basic or Premium plan) in the same region as your stuck Virtual Network. You can put it in a temporary resource group.
2. Inside the new Web App’s settings, go to Networking, then VNet integration. Connect it to the same subnet that’s locked.
3. Wait for about two minutes to ensure the connection is established.
4. Still in the Networking section, click the Disconnect button. This action forces Azure to run cleanup scripts that remove the Service Association Link.
5. After disconnecting successfully, delete the temporary Web App.
6. Now, try deleting your original Virtual Network and Resource Group. The lock should be gone.
By following these steps, you should be able to cleanly remove the network restrictions and proceed with your resource cleanup.
ChatGPT
Perplexity
Gemini AI
Grok AI
