Removing orphaned Service Association Link

Question

Removing orphaned Service Association Link

Will Godbe 20 Microsoft Employee

I need to remove/delete an orphaned Service Association Link so I can migrate my resources to another subscription.

This is the orphaned SAL: /subscriptions/Subscription 1/resourceGroups/orleans-build/providers/Microsoft.Network/virtualNetworks/orleans-build-vnet/subnets/default/serviceAssociationLinks/orleans-build-hosted-pool

Details:

linkedResourceType: Microsoft.CloudTest/hostedpools

linked resource: orleans-build-hosted-pool

allowDelete: false

parent hosted-pool resource: no longer exists

impact: prevents moving the VNet to subscription Subscription 2

I can't delete it myself because it has "allowDelete" set to "false", and the Microsoft.CloudTest/hostedpools resource no longer exists.

More info at my previous ticket here: https://learn.microsoft.com/en-us/answers/questions/5966547/removing-orphaned-service-association-link?page=1&orderby=Helpful&comment=answer-12900286&translated=false#newest-answer-comment

0 comments

Answer accepted by question author

GitaraniSharma-MSFT 50,287 Microsoft Employee Moderator

Hello @Will Godbe ,

I understand that you're attempting to move an Azure Virtual Network from one subscription to another, but the move is currently blocked by a Service Association Link (SAL). The SAL is associated with linkedResourceType: Microsoft.CloudTest/hostedpools, preventing the VNet from being moved. Additionally, you're unable to remove the subnet delegation or delete the subnet because the allowDelete property is set to false.

I reached out to you directly to discuss the issue in more detail and gather the information needed for troubleshooting. During our investigation, we identified that the issue was service-related and engaged the backend team for assistance.

The backend team initially ran a cleanup job to remove the Service Association Link (SAL), but the operation failed because the required permissions were not available on the resource. After you granted the necessary permissions, the cleanup job completed successfully and removed the SAL. Once the SAL was removed, you were able to move the virtual network without any issues.

Kindly let us know if the above helps or you need further assistance on this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

0 comments

1 additional answer

Your answer

Answer 1

Hello @Will Godbe

Based on the details you've shared, this appears to be an orphaned Service Association Link (SAL). Since the linked resource (Microsoft.CloudTest/hostedpools) no longer exists and the SAL has allowDelete = false, there isn't a supported customer-side method to remove it using Azure Portal, Azure CLI, PowerShell, or the REST API.

The allowDelete property is enforced by the resource provider, so even if the parent resource has been deleted, the SAL remains protected until the provider removes or updates the association.

Because the orphaned SAL is preventing the VNet from being moved to another subscription, the recommended approach is to open an Azure Support request so the Azure Networking or owning resource provider team can perform a backend cleanup.

When opening the request, include:

The full Service Association Link (SAL) resource ID.
The subscription ID and resource group.
The name of the deleted linked resource (orleans-build-hosted-pool).
Confirmation that allowDelete = false and that the parent resource no longer exists.
The fact that the orphaned SAL is blocking a resource move operation.

Since you referenced a previous support case, I'd also recommend including that case number in the new request so the support engineer can review the earlier investigation.

Please "Accept the Answer" if this information helped you. This will help us and others in the community as well.