This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 45%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Unable to delete VM/RG with deny assignment. I've elevated my permissions in Azure AD per another article I read but I'm still unable to delete.
Failed to stop the virtual machine 'AzureVMX'. Error: The client '******@mycompany.com' with object id '93f4effa-f680-48df-976f-f3ea0ffd2f84' has permission to perform action 'Microsoft.Compute/virtualMachines/deallocate/action' on scope 'AzureVMX'; however, the access is denied because of the deny assignment with name 'System deny assignment created by managed application /subscriptions/0c9373ab-097d-44cb-8cbc-2519fdbccd42/resourceGroups/AzureVMX/providers/Microsoft.Solutions/applications/5373ca8c06ef44afa3165e5185c7d768' and Id 'c983fa1c23ac413c9708725685230ab7' at scope 'AzureVMXtqn3ppfnuisli'.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 98%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
Can you please share the article you are referring to?
One of the scenario when I have seen this error message is when the VM you are attempting to perform maintenance on is a virtual appliance and by default configured with a readonly lock for you and then the rest of the permissions are governed by the vendor.
Refer to the below link for a more thorough explanation of how permissions work on virtual appliances, if this is applicable for your case.
Overview of managed applications - Azure Managed Applications | Microsoft Learn
You need to delete the managed application.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.