Share via

Subnet deletion blocked by orphaned App Service serviceAssociationLink

JOANNE INGARI 20 Reputation points
2026-02-05T16:22:55.1966667+00:00

Subnet xxxxAppSubnet is blocked by a serviceAssociationLink (AppServiceLink).

The linked resource Microsoft.Web/serverfarms/ASP-xxxx no longer exists

(ResourceNotFound), but allowDelete=false prevents removal.

This is an orphaned App Service VNet integration link.

How do I remove the serviceAssociationLink from the subnet backend-side.?

Azure App Service
Azure App Service

Azure App Service is a service used to create and deploy scalable, mission-critical web apps.

0 comments No comments
{count} votes

Answer accepted by question author and recommended by moderator
  1. Q&A Assist
    2026-02-05T16:23:07.1966667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    To remove the orphaned Service Association Link (SAL) from the subnet, you can follow these steps:

    1. Purge the orphaned Service Association Link: Use the Azure CLI command to delete the orphan SAL. Replace the placeholders for SUBSCRIPTION-ID, LOCATION, and SUBNET-RESOURCE-ID with your specific details:
         az rest --method POST \
           --uri "/subscriptions/<SUBSCRIPTION-ID>/providers/Microsoft.Web/locations/<LOCATION>/purgeUnusedVirtualNetworkIntegration?api-version=2024-04-01" \
           --body "{'subnetResourceId': '<SUBNET-RESOURCE-ID>'}"
      
      If successful, you should receive a response indicating that the unused virtual network integration has been purged.
    2. Re-create and disconnect the integration: If the purge command does not resolve the issue, you may need to re-create the virtual network integration and then disconnect it:
      • Re-create the App Service plan and app using the same web app name as before.
      • Navigate to Networking on the app in the Azure portal and configure the virtual network integration.
      • After configuring, select the 'Disconnect' button.
      • Delete the App Service plan or app.
      • Update or delete the subnet or virtual network as needed.

    If you still encounter issues after these steps, consider contacting Microsoft Support for further assistance.

    2 people found this answer helpful.
    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. JOANNE INGARI 20 Reputation points
    2026-02-05T19:23:01.2066667+00:00

    After running the above command, run the command below to delete the subnet:

    az network vnet subnet delete --resource-group xxx-rg --vnet-name xxxVnet --name xxxSubnet

    0 comments No comments

  2. Golla Venkata Pavani 2,980 Reputation points Microsoft External Staff Moderator
    2026-02-05T17:05:07.9433333+00:00

    Hi @JOANNE INGARI ,

    Thank you for reaching us regarding the issue.

    I am glad to hear that issue has been resolved. By using below command

    az network vnet subnet delete --resource-group xxx-rg --vnet-name xxxVnet --name xxxSubnet
    

    It removes the selected subnet permanently from your VNet.

    User's image

    Sometimes subnet deletion is blocked due to an orphaned App Service serviceAssociationLink. In these cases, we need to remove the SAL from the backend. For this, we require the information mentioned above to clear it from the backend.

    Could you  Please click "Accept the answer” and Yes, this can be beneficial to other community members.If you have any other questions, let me know in the "comments" and I would be happy to help you

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.