Share via

How delete the integrated resources

Vishwa Teja Devarakonda 60 Reputation points
2026-06-14T06:15:38.2433333+00:00

Hi Q&A team,

Actually I was facing an issue while deleting the resource group due my subnet is integrated with the web app I have deleted those resource only my vnet is left in the resource group while I am trying to delete I'm getting error that cannot delete due to subnet is attached I have tried multiple via portal and even trying delete using az CLI still cannot resolve the issue please check the error attached provide me detailed intructions to resolve this.
User's image

Thanks&Regards,
Vishwa

Azure Virtual Network
Azure Virtual Network

An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.

0 comments

Answer accepted by question author

TP 158.1K Reputation points Volunteer Moderator
2026-06-14T10:00:30.1+00:00

Hi Vishwa,

Please run command similar to below in Azure Cloud Shell (Bash mode) to purge unused Service Association Link (SAL). Substitute SubscriptionId, Location, SubnetId. Subnet Id can be found by navigating to your subnet in portal and clicking the Copy icon next to Subnet ID

az rest --method POST \
     --uri "/subscriptions/<SubscriptionId>/providers/Microsoft.Web/locations/<Location>/purgeUnusedVirtualNetworkIntegration?api-version=2024-04-01" \
     --body "{'subnetResourceId': '<SubnetId>'}"

You should see output similar to below:

User's image

Once you have completed the above, try the delete again.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Megha Ramakrishnan 245 Reputation points
    2026-06-14T15:21:01.74+00:00

    Hi @Vishwa Teja Devarakonda

    Even though you deleted the Web App, Azure App Service creates an underlying, invisible Network Intent Policy or maintains an active Service Association Link (SAL) on the subnet to preserve the integration.

    Until that link or policy is broken, Azure locks the subnet to prevent accidental network disruption, which stops you from deleting the Virtual Network or the Resource Group.

    Try the below steps to resolve the issue.

    1. Clear App service links via CLI Open your Azure CLI or Cloud Shell and run these commands.

    Delete the Network Intent policy:

    Run this command to check for and destroy any policies holding your subnet:

    az network vnet subnet update \

    --resource-group <Your-Resource-Group-Name> \

    --vnet-name <Your-VNet-Name> \

    --name <Your-Subnet-Name> \

    --remove networkIntentPolicy

    Clear subnet delegation:

    Clear the subnet by running:

    az network vnet subnet update \

    --resource-group <Your-Resource-Group-Name> \

    --vnet-name <Your-VNet-Name> \

    --name <Your-Subnet-Name> \

    --remove delegations

    Once the commands have run successfully, try deleting the resource group again.

    If the CLI throws an error or you prefer using the Azure Portal, you can create a dummy App service to release the lock.

    1. Create a Temporary Web App: Create a new, cheap (Basic or Premium) Web App in the exact same region as your stuck VNet. (You can put it in a temporary resource group).
    2. Re-integrate it: Go to the new Web App > Networking > VNet integration and connect it to the exact stuck Subnet.
    3. Disconnect it properly: Once connected successfully, wait 2 minutes. Then, click Disconnect inside the Web App's networking blade. This forces Azure to run its teardown scripts and cleanly wipe out the Service Association Link.
    4. Clean up: Delete the temporary Web App, then proceed to delete your stuck VNet and Resource Group.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.