Share via

Can't delete virtual network due to orphaned service association link

Simon 20 Reputation points
2025-11-24T16:27:45.0933333+00:00

Hi,

I created an Azure Function App (App Service Plan) and then later deleted the associated resource group. However the RG won't fully delete because there's a subnet in a virtual network that has an orphaned Service Association Link.

I've tried the workaround of creating a new App Service Plan & App Service with the same name, enabling virtual network integration to the same subnet and then disconnecting it.

However because the original RG is in the "deleting" state - I had to create it in a new one, and after I disconnect the virtual network integration, I still can't remove the original subnet...possibly because there is a delete lock on the original RG??? I've tried this several times.

I have come to the conclusion this is something I cannot fix myself via the front end/portal or through the CLI/PowerShell. I can't delete the SAL via the command line because I get "(UnauthorizedClientApplication) Unauthorized client application id".

Can you help?

Thanks.

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
Answer accepted by question author
  1. Pravallika KV 2,845 Reputation points Microsoft External Staff Moderator
    2025-11-25T04:36:17.8066667+00:00

    Hi @Simon,

    Thanks for the confirmation over chat. Glad you were able to delete virtual network.

    I am summarizing the discussion and posting the same as answer.

    Solution:

    After a certain period or upon trying specific actions like recreating and disconnecting the App Service Plan, the system was able to release the lock or finalize the deletion of the orphaned Service Association Link. In some cases, manual intervention isn't required once the system completes the background cleanup.

    Looks like this is a transient issue, resolved independently likely due to Azure's automatic cleanup processes. When a resource group is in the 'deleting' state, it can sometimes take time for the system to clear out all dependencies or locked resources, especially if there are network integrations or orphaned associations.

    Hope it helps!

    Please do not forget to click "Accept the answer” and Yes, this can be beneficial to other community members.

    User's image

    If you have any other questions, let me know in the "comments" and I would be happy to help you.

    1 person found this answer helpful.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.