Disable ASR (PowerShell)

Cloud Kid 1

I have followed the Microsoft tech docs below but the command throws out an error:

Tech Docs:

https://learn.microsoft.com/en-us/azure/backup/backup-azure-security-feature-cloud#:\~:text=Disabling%...

Error:

Powershell
Set-AzRecoveryServicesVaultProperty : Invalid format of the resource identifier.
Parameter name: idFromServer
At line:1 char:1

Set-AzRecoveryServicesVaultProperty -Vault $status -SoftDeleteFeature ...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
CategoryInfo : CloseError: (:) [Set-AzRecoveryServicesVaultProperty], ArgumentException
FullyQualifiedErrorId : Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.SetAzureRmRecoveryServicesVaultProperty

I am not sure what the correct 'Identifier' is. According to the docs, it should be the vaultID but that does not work. I have also tried the vault name but that also throws back the same error.

I have also tried running the command on it's own in a single subscription with 1 ASR. The only paramerer requested is the Disable/Enable but when I type DIsable, it throws the following:

Powershell
PS C:\Users\CloudKid> Set-AzRecoveryServicesVaultProperty
cmdlet Set-AzRecoveryServicesVaultProperty at command pipeline position 1
Supply values for the following parameters:
SoftDeleteFeatureState: disable
Set-AzRecoveryServicesVaultProperty : One or more errors occurred.
At line:1 char:1

Set-AzRecoveryServicesVaultProperty
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
CategoryInfo : CloseError: (:) [Set-AzRecoveryServicesVaultProperty], AggregateException
FullyQualifiedErrorId : Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.SetAzureRmRecoveryServicesVaultPropert

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-16T19:18:30.66+00:00

@Cloud Kid What is the PowerShell version being used?

Just an FYI: See the snippet below:

2 answers

Matthew Bradley 1 Reputation point

2020-11-10T12:56:11.64+00:00

Hi,

Your PowerShell references -Vault $status. If $status if your Vault ID then you need to change this to -VaultID $status. You are missing the ID off the end of VaultID.

That should fix the identifier issue.

Thanks,
Matt
Please sign in to rate this answer.
Cloud Kid 1 Reputation point

2020-11-10T13:55:36.49+00:00

Hi Matt,

Thanks for coming back to me on this.

Unfortunately, this did not work and provided the same error:

Set-AzRecoveryServicesVaultProperty : Invalid format of the resource identifier. Parameter name: idFromServer At line:15 char:1 + Set-AzRecoveryServicesVaultProperty -VaultID $status -SoftDeleteFeatu ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : CloseError: (:) [Set-AzRecoveryServicesVaultProperty], ArgumentException + FullyQualifiedErrorId : Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.SetAzureRmRecoveryServicesVaultProperty

I have checked the $Status Variable and it does return the Vault ID:

PS C:\Users\CloudKid> $Status

VaultId

/sub/SubID/RG/Test-RG/providers/*M.R.Svaults/vault237

I Had to snip it down to fit :)

Cloud Kid 1 Reputation point

2020-11-10T13:58:28.81+00:00

The cmdlet does not seem to work even if I run the command against a single ASR in a seperate subscription. The command recognizes there is only 1 ASR but still throws an error when I enter "DISABLE":

Powershell PS C:\Users\CloudKid> Set-AzRecoveryServicesVaultProperty cmdlet Set-AzRecoveryServicesVaultProperty at command pipeline position 1 Supply values for the following parameters: SoftDeleteFeatureState: disable Set-AzRecoveryServicesVaultProperty : One or more errors occurred. At line:1 char:1 + Set-AzRecoveryServicesVaultProperty + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : CloseError: (:) [Set-AzRecoveryServicesVaultProperty], AggregateException + FullyQualifiedErrorId : Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.SetAzureRmRecoveryServicesVaultPropert

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-17T06:07:04.967+00:00

@Cloud Kid Can you please paste the vaultID parameter that you are passing? It should be the complete identifier and not just name. So, pasting the ID here would help.

Cloud Kid 1 Reputation point

2020-11-18T11:13:05.513+00:00

I created a subscription containing 1 ASR. The command then picks up the ASR but cannot action the Disable. I have full contributor rights to the subscription also:

Powershell PS C:\Users\CloudKid> Set-AzRecoveryServicesVaultProperty cmdlet Set-AzRecoveryServicesVaultProperty at command pipeline position 1 Supply values for the following parameters: SoftDeleteFeatureState: disable Set-AzRecoveryServicesVaultProperty : One or more errors occurred. At line:1 char:1 + Set-AzRecoveryServicesVaultProperty + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : CloseError: (:) [Set-AzRecoveryServicesVaultProperty], AggregateException + FullyQualifiedErrorId : Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.SetAzureRmRecoveryServicesVaultPropert

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-19T07:53:00.507+00:00

@Cloud Kid Please run the command with "-debug" parameter

Set-AzRecoveryServicesVaultProperty -VaultID @status -SoftDeleteFeature.......... -debug

This will give service request and response, share that with us and we may be able to figure out where the problem occurred.

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-20T10:34:27.623+00:00

@Cloud Kid Can you share the output of the command?

Cloud Kid 1 Reputation point

2020-11-20T15:09:38.743+00:00

Hi Sadiqh,

Please see below

Set-AzRecoveryServicesVaultProperty: Invalid format of the resource identifier. (Parameter 'idFromServer') DEBUG: AzureQoSEvent: CommandName - Set-AzRecoveryServicesVaultProperty; IsSuccess - False; Duration - 00:00:05.2062168;; Exception - System.ArgumentException: Invalid format of the resource identifier. (Parameter 'idFromServer') at Microsoft.Azure.Management.Internal.Resources.Utilities.Models.ResourceIdentifier..ctor(String idFromServer) at Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.SetAzureRmRecoveryServicesVaultProperty.<ExecuteCmdlet>b__4_0(); DEBUG: Finish sending metric. DEBUG: 3:06:37 PM - SetAzureRmRecoveryServicesVaultProperty end processing.

Cloud Kid 1 Reputation point

2020-11-20T15:11:20.327+00:00

The format of the VaultID in the $status parameter is

/sub/SubID/RG/Test-RG/providers/*M.R.Svaults/vault237

I have also tried vault237 on its own but no joy.

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-20T19:04:37.717+00:00

@Cloud Kid Can you also share the output of these two commands?

$myVault = Get-AzRecoveryServicesVault -Name <VaultName> -ResourceGroupName <RGName>
$myVault.Id

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-23T07:48:55.69+00:00

Any update on this?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Cloud Kid 1 Reputation point

2020-11-23T14:41:18.447+00:00
PS /home/CloudKid> $myVault = Get-AzRecoveryServicesVault -Name Vault773 -ResourceGroupName TestRG PS /home/CloudKid> $myVault.Id /subscriptions/9c75e489-54ef-4e72-99a4-e87860041a2c/resourceGroups/TestRG/providers/Microsoft.RecoveryServices/vaults/vault773
Please sign in to rate this answer.
SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-24T07:28:53.383+00:00

@Cloud Kid Sorry for the confusion.

The output isn't helpful. Could you please run these 3 cmdlets and share the output in .txt file?

1) $vault=Get-AzRecoveryServicesVault -ResourceGroupName "RGName" -Name "VaultName" -Debug
2) Get-AzRecoveryServicesVaultProperty -VaultId $vault.ID -Debug
3) Set-AzRecoveryServicesVaultProperty -SoftDeleteFeatureState Disable -VaultId $vault.ID -Debug

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-25T13:21:27.62+00:00

@Cloud Kid Please share the output of 3 cmdlets.

Cloud Kid 1 Reputation point

2020-11-26T13:45:09.73+00:00

42959-debug1.txt

The requested information has been attached

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-26T14:02:44.503+00:00

We will investigate and get back to you shortly.

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-26T19:12:41.787+00:00

@Cloud Kid We investigated the .txt file debug logs, it seems that you were successful in disabling Soft Delete for ‘vault773’.

Cloud Kid 1 Reputation point

2020-11-27T13:35:26.43+00:00

PS /home/CloudKid> $status VaultId BackedUp ------- -------- /subscriptions/99f4-e97960041b1c/resourceGroups/TestRG/providers/Microsoft.RecoveryServices/vaults/vault773 True PS /home/CloudKid> $vault.id /subscriptions/99f4-e97960041b1c/resourceGroups/TestRG/providers/Microsoft.RecoveryServices/vaults/vault773 PS /home/curtis>

I think this could be the difference in the 2 scripts. I will go away and test.

Thank you so much for your help

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-27T14:05:47.967+00:00

@Cloud Kid Thanks for the reply. Please post an update of your test.

SadiqhAhmed-MSFT 45,181 Reputation points Microsoft Employee

2020-11-30T07:46:30.98+00:00

@Cloud Kid Have you had any luck with your testing?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Disable ASR (PowerShell)

2 answers

Your answer