Issue with APP Service Plan in a Resource Group - azure

I'm not trying to delete any App Service Plan or App Service, But I'm seeing “This resource has a 'delete' lock that prevents us from deleting the
resource. Please remove the lock and try again.” message on our App Service Plans under one Resource Group, Other Resource Group App Service Plans are fine.
All App Services are working fine under faulty Resource Group.
While Creating Dashboard using Faulty Resource Group, App Service Plans and App Services are not visible.
Please guide fixing this issue.

Resource locks don't just prevent deletion. There are two types of locks: CanNotDelete and ReadOnly. If a ReadOnly lock is applied, you won't be able to make administrative changes to the resource. I suggest clearing the locks and seeing if this message goes away.

Related

Move or regenerate Azure microsoft.web/certificate

I need to reorganize my Azure resource groups and could move everything except the microsoft.web/certificates. When I try to move this you get a validation error
Resource move is not supported for resource types 'Microsoft.Web/certificates'. (Code: ResourceMoveNotSupported, Target: /subscriptions/{GUID}/resourceGroups/{Old Group Name}/providers/Microsoft.Web/certificates/{Name})
Anybody knows how to move these certificates or how I can regenerate/replace this certificate?
As I understand you’re attempting to move resources to a different/new Resource Group (RG).
There are some limitations and checklist/guidelines for moving resources.
Checkout this doc: Move App Service resources to a new resource group or subscription.
Also, note that Azure resource type Microsoft.web/certificates do not support move operation between RGs, but only supports move operations across subscriptions.
Reference: move-support-resources#microsoftweb
You may want to validate: For your Azure web app, select Diagnose and solve problems. Then, select Configuration and Management >> Select Migration Options.

How to know the origin resource group of a App Service Plan?

I have an Azure App Service Plan and a Web App. I want to move them to another subscription. There is a limitation that app service plan and app service must be moved together from the origin resource group of the app service plan. Someone had moved the resources from their origin resource group and deleted the resource group. Now, how can I find the name of the origin resource group ?
In some cases it can be found in the WebSpace property of app service plan. For example [ "webSpace": "RG-SK-MarkIII-CentralUSwebspace" ], RG-SK-MarkIII is the origin resource group of the app plan. But in my case the webSpace is like this ["webSpace": "AustraliaEastwebspace" ]. Is there any other way to find it through CloudShell ?
You can look up the actions taken by a particular user, even for a resource group that no longer exists.
az monitor activity-log list -g ExampleGroup --caller someone#contoso.com --offset 5d
Kindly try these steps:
If you don't remember the original resource group, you can find it through diagnostics.
For your web app, select Diagnose and solve problems.
Then, select Configuration and Management.
Select Migration Options.
Select the option for recommended steps to move the web app.
You see the recommended actions to take before moving the resources. The information includes the original resource group for the web app.
- I understand you're referring to RG deletion scenario, kindly try this and let me know how it goes.
Reference document move across subscription.
Furthermore, you can only change to a plan that was created in the same "webspace" as your original app. Webspace is an internal concept that's not exposed, but you can verify whether your source and destination plans are in the same webspace or not.
To verify, do the following:
https://resources.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/serverfarms/{serverFarmName}
Confirm whether the webSpace property of your source plan matches the webSpace property of your new plan

Recover Azure Databricks after deletion

If Azure Databricks will be deleted by someone and which contains Notebooks as well. So, if we want to recover that databricks along with notebooks , is it possible?
If so please explain how we can achieve this type of condition.
If you are looking to prevent deletion, you can set Azure Resource locks. Specifically you can set the CanNotDelete lock. This lock means authorized users can still read and modify a resource, but they can't delete the resource.
Some Azure services, such as Azure Databricks, use managed applications to implement the service. In that case, the service creates two resource groups. One resource group contains an overview of the service and isn't locked. The other resource group contains the infrastructure for the service and is locked. You should lock the resource containing the service to prevent accidental deletion.
If you try to delete the infrastructure resource group, you get an error stating that the resource group is locked. If you try to delete the lock for the infrastructure resource group, you get an error stating that the lock can't be deleted because it's owned by a system application.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Deployment slots on Web App to different resource groups

I am having different slots for a web app on azure for dev, test, production. I need to move different slots to their respective resource groups.
Can different slots for a single web app be in different resource groups? I tried to move a slot to different resource but gives me error (The list of resources in move definition cannot be null or empty. (Code: InvalidResourceMoveRequest)). Cannot make out much from the error. Is there a way to get more details on this error somewhere?
Thanks!
Can different slots for a single web app be in different resource groups?
You could not move the slot to other resource group, because the azure slot is not a top level resource.
This means that you could move the top level resource in order to move the child resource.
You could get more details about the limitation when moving resources to new group or subscription.

Cannot create Hybrid Connection in Azure Portal

We are trying to set up a Hybrid Connection from an App Service and the Azure Portal behavior is quite odd. We have done this previously from another subscription; this subscription is part of a CSP (so we can't even try doing it from the old/classic portal).
Blade prompts us to create a new resource group even though the one it defaulted to already exists. (Like it can't populate existing resource groups?)
No locations are provided when navigating to the Location pane, there's a cutoff error message:
"There are no locations available. You may not h..."
We have "owner" role on the subscription.
his subscription is part of a CSA (so we can't even try doing it from the old/classic portal).
Do you mean CSP there, as in Cloud Solution Provider? If so, the resource provider Microsoft.BizTalkServices is not yet available in CSP.
Yes, the error message and how the UI flow is handled could use some improvement.
See this for more:
https://blogs.technet.microsoft.com/hybridcloudbp/2016/06/29/list-of-azure-services-in-csp/

Resources