Unable to delete search service due to InvalidAuthenticationTokenTenant

Question

Hello community,

I recently provisioned both a search service and an OpenAI service within the same resource group. However, when attempting to delete the entire resource group, I encountered an issue: the search service failed to be deleted and displayed the following error.

Before this issue occurred, we didn’t make any changes to our tenant or subscription, and everything else seems to be working fine except for the search service. I’m unsure why this is happening and why two different IDs are shown in the error message. Any insights or guidance would be appreciated!

{"error":{"code":"InvalidAuthenticationTokenTenant","message":"The access token is from the wrong issuer 'https://sts.windows.net/{wrong tenant id }'. It must match the tenant 'https://sts.windows.net/{our tenant id }/' associated with this subscription. Please use the authority (URL) 'https://login.windows.net/{our tenant id}' to get the token. Note, if the subscription is transferred to another tenant there is no impact to the services, but information about new tenant could take time to propagate (up to an hour). If you just transferred your subscription and see this error message, please try back later."}}

Answer 1

@Yifan Lin Thanks for asking question!

The issue seems to be that you're attempting to access resources in a different tenant, or the resources have been transferred to another tenant. Ensure that the account you're using is properly registered.

Refer to this solution for further assistance.

Additionally, consider using ClientSecretCredential rather than setting the AZURE_TENANT_ID, AZURE_CLIENT_ID, and AZURE_CLIENT_SECRET as environment variables.