Share via

How do I update the NS record to cloudflare for an App Service Domain

Carl Lightfoot 0 Reputation points
2025-11-28T09:13:26.6+00:00

I have an Azure App Service Domain (registered through Azure's partnership with GoDaddy) that I am trying to migrate/transfer to Cloudflare Registrar. However, Cloudflare's transfer process requires updating the domain's Name Server (NS) records to point to their nameservers (e.g., [specific Cloudflare NS like ns1.cloudflare.com and ns2.cloudflare.com]) before initiating the transfer. I am unable to make this change because:

  • The domain has an associated Azure DNS Zone, which locks the NS records to Azure's pre-populated name servers (e.g., ns1-01.azure-dns.com, etc.). These cannot be modified or removed directly in the Azure Portal or via CLI, as per Azure DNS limitations.
  • There is no interface in the Azure Portal under App Service Domains to edit the root NS records. Attempting to do so results in errors or no available options.
  • The domain is managed jointly by Azure and GoDaddy, but I cannot access the GoDaddy Domain Control Center (DCC) at https://dcc.secureserver.net using the contact email listed in my Azure Portal (under App Service Domains > Contact Information). Password reset attempts do not send emails, possibly because it's a Microsoft-generated address or due to access restrictions for Pay-As-You-Go subscriptions.

This creates a deadlock: I need to update NS for the transfer, but Azure's setup prevents it, and direct GoDaddy access is blocked.

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. TP 145.1K Reputation points Volunteer Moderator
    2025-11-29T18:50:09.5766667+00:00

    Hi Carl,

    I recommend you first transfer your App Service Domain to a different (not GoDaddy or Cloudflare) registrar. Once transfer is complete you can update name servers to point to Cloudflare, and after 60 days you can transfer the domain to Cloudflare.

    There used to be workarounds to provide access to DCC to make these types of changes, but they no longer work.

    To transfer to different registrar you will need authorization code. You may open Azure Cloud Shell and execute command similar to below from App Service team blog (replace subscription id, resource group, domain name):

    Invoke-AzRestMethod -Path "/subscriptions/<SUBSCRIPTION-ID>/resourceGroups/<RESOURCE-GROUP-NAME>/providers/Microsoft.DomainRegistration/domains/<DOMAIN-NAME>/transferout?api-version=2021-02-01" -Method PUT

    In the output from the command, you need authCode, which is what you will provide the new domain registrar when requesting transfer in.

    Please click Accept Answer and upvote if the above was helpful.

    Thanks.

    -TP

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.