If one were to submit a support request to Microsoft would they be able to recover a deleted resource group in Azure? There were quit a few resources in this group.
It's not possible to restore a deleted resource group.
You can submit a support request to Microsoft, but unfortunately they won't be able to help you.
Resource Group deletion is irreversible.
Related
We are using a storageclass in Kubernetes to dynamically provision azure file shares with pvc claims (https://learn.microsoft.com/en-us/azure/aks/azure-files-dynamic-pv?source=recommendations)
We use recovery service vault to backup these file shares (https://learn.microsoft.com/en-us/azure/backup/azure-file-share-backup-overview?WT.mc_id=Portal-Microsoft_Azure_Support#key-benefits-of-azure-file-share-backup).
Azure Backup locks the storage account associated with the file shares against deletion in Resource Group scope. The lock is called "AzureBackupProtectionLock" and it protects storage accouunts registered with a Recovery Services vault to guard against deletion of backups.
That seems fair, however this lock on resource group scope is blocking us from upgrading the AKS version. The screenshot with error is attached
Any idea how to prevent this behaviour ? Thanks :)
This error may occur if your resource group lock as applied as Read only access When a resource is marked as read-only, it can only be accessed; it cannot be update or deleted. By implementing this lock, all authorized users will only be granted the privileges offered by the Reader role.
Please check this Considerations before applying your locks To resolve this issue make sure to delete our locks in your resource group as below:
Go to azure portal -> your resource group ->under setting locks -> delete
You need access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* operations in order to add or remove management locks. Only Owner and User Access Administrator have access to those activities among the built-in roles.
Reference: Lock your resources to protect your infrastructure
I created Azure Databricks in my resource group. This created the managed resource group with a storage account. My resource group also contains other database services such as Cosmos DB and SQL Server.
I removed the resource group after my work was complete. Unfortunately, the managed resource group did not get removed. Note: I did not remove the Databricks service, I deleted the resource group itself.
When I try to remove the managed resource group manually, I get the following error:
the access is denied because of the deny assignment with name 'System deny assignment created by Azure Databricks
Under IAM, I do see the Deny Assignment that was created by Databricks. Due to this, the resource group cannot be deleted.
It's been a few days since my resource group was deleted, but the managed resource group still remains.
How can I remove this managed resource group?
The managed resource group created by Databricks cannot be deleted from portal or through any scripts since it was created by the Databricks resource itself. The deny assignment prevents deletion of the managed resource group. The only option is to contact support team.
Microsoft support allowed me to create a free ticket to raise the issue. The engineering team removed the restriction on the managed resource group and informed me that I can go ahead with deleting the same.
I was able to delete the managed resource group successfully. Also note that I was not able to re-produce the issue (it must be a one-off incident).
Thanks for all the help.
I want to move azure resource group from one azure account to otherazure account. Can any one help me how to move this to other account?
If my understanding of your question is correct. You're intending to move Resource Group from one account/subscription to another Azure Subscription/owner. If this is the case, you can move resources from a source group to a target group in a different subscription.
There are some important steps to do before moving a resource. By verifying these conditions, you can avoid errors. Currently, not all resources in Azure support move. For a list of resources that support move, see Move operation support for resources.
Kindly verfiy and validate the move as outlined in this document- https://learn.microsoft.com/azure/azure-resource-manager/management/move-resource-group-and-subscription#validate-move before initiating the move process.
Note: Moving a resource only moves it to a new resource group or subscription. It doesn't change the location of the resource.
I am moving a VM and its related resouces to another subscription and getting an error.
{"code":"MissingRegistrationsForTypes","message":"The subscription 'xxx' is not registered for resource types 'Microsoft.Compute/disks (eastus),Microsoft.Compute/virtualMachines (eastus)'."}
When I view the Resource Provider status in Azure portal I can see that Microsoft.Compute provider is Registred.
Any ideas on how to solve this? Thanks.
Update
I managed to solve this by creating a sample VM in East US region under that subscription, which I am guessing registered the provider.
For moving resources to another subscription, there are some limitations to that.
The source and destination subscriptions must be in the same tenant.
The resource provider must be registered in both subscriptions.
The account which you use to move the resources must have enough permission.
The service must enable the ability to move resources.
The four points above are the most important. For more details, see Checklist before moving resources.
Some times we had deleted the 'resource group' accidentally on azure cloud, its fine that if our/your resource group does not have any deployments on it and we can create immediately newer one and will proceed our stuff, but if we had deployments on it, then its becomes major problem/task.
So can we recover Resource Group? like a recovery of Virtual machine in Azure.
You can export service configurations that belong to a resource group as JSON. Within the portal, there is an option "Export Template" under the Resource Management Navigation Group.
So can we recover Resource Group? like a recovery of Virtual machine in Azure.
Unfortunately, we have no way to recovery it, if the resource group is deleted . We could get the warning if we try to delete resource group from the azure portal. Connect to Azure support team for help maybe a way, but I don't think it could be easy for restoring.
Note : based on my understanding even if we could re-create the resource with ARM template(If we have exported the ARM template before delete), it seems that just with the same resource names with deleted resource that is not equal recovery action.