Can't move resources to different subscription

Question

Can't move resources to different subscription

Ali Price 1

I'm trying to move resources from one subscription to another (all the resources in a group), but I get this error (used hashes to cover a url referenced in the below). Thanks

Resource move policy validation failed. Please see details. Diagnostic information:  subscription id '0d200514-021a-4ce8-8209-54fe04ed079a', request correlation id 'f888c378-6255-4890-a81e-c42ed8dadf3b'. (Code: ResourceMovePolicyValidationFailed) Property id '' at path 'properties.keyVaultId' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'. (Code: LinkedInvalidPropertyId, Target: Microsoft.Web/Microsoft.Web/certificates/#####-###.##-#####-######)
 (Code: ResourceMovePolicyValidationFailed)

Abiola Akinbade 29,405 Reputation points Volunteer Moderator

2025-04-06T19:20:51.1566667+00:00

This is because Certificates associated with App Services or stored in Key Vault are not supported by Azure Resource Mover or Move operations

See: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources#microsoftkeyvault

Instead of moving dependent resources, you can configure the resources you are moving to use equivalent resources in the target region. This requires manually configuring the resource mappings in the target region

See reference: https://learn.microsoft.com/en-us/answers/questions/2224975/error-moving-resources-between-azure-subscriptions

You can mark it 'Accept Answer' and 'Upvote' if this helped you

(Please note: If you have Priority Community support please wait for a dedicated Microsoft support representative to assist you, as they have access to the necessary backend resources. If you have not yet opened a support case, we recommend reaching out through the support channel available under your subscription level.)

Regards,

Abiola
Vinod Pittala 3,695 Reputation points Microsoft External Staff Moderator

2025-04-08T01:27:03.84+00:00

Hello Ali Price,

I wanted to follow up on the answer Abiola Akinbade provided regarding the issue you encountered. Have you had a chance to review it? I would like to ensure that the issue has been resolved to your satisfaction or if there is any further assistance you might need.

Please don't hesitate to reach out, as we are always here to help and support you.

Thank you
Vinod Pittala 3,695 Reputation points Microsoft External Staff Moderator

2025-04-10T05:34:34.0866667+00:00

Hi Ali Price,

I just wanted to check if the above provided solution worked for you or if you need any further assistance?

Please feel free to let us know, as we are always here to help whenever you need us.

Additionally, if you have a moment, please do upvote it if the information provided has been helpful. This can be beneficial to other community members and would be greatly appreciated.

Thank you.
Sirra Sneha 550 Reputation points Microsoft External Staff Moderator

2025-04-22T06:39:08.0533333+00:00

Hi @Ali Price ,

Just following up to see if you're still facing the issue with moving resources between subscriptions. Were you able to resolve it by manually reconfiguring the certificate or setting up the equivalent resources in the target subscription?

If you need any help exporting/importing the certificate or updating the App Service bindings, feel free to share more details.
Madugula Jahnavi 495 Reputation points Microsoft External Staff Moderator

2025-04-23T11:56:52.4133333+00:00

Hello Ali Price, We haven't heard any response from you. Could you respond to the above comment and also have you checked that the certificate is linked to a Key Vault!
Madugula Jahnavi 495 Reputation points Microsoft External Staff Moderator

2025-04-24T14:43:39.6533333+00:00

Hello Ali Price, Could you respond to the above provided comment to look into the issue for further investigation?
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2025-04-29T12:59:53.98+00:00

@Ali Price Sorry for the delayed response.

This is related to the Policy check that ARM does as part of the move operation, although the error message looks like there’s a misconfiguration for one of the properties where a fully qualified resource ID is expected. Have you investigated why this is the case?

See FAQ here:

What does the error code "RequestDisallowedByPolicy" mean?

Resource Manager validates your move request before attempting a move. This validation includes checking policies defined for the resources involved in the move. For example, the validation fails when you're attempting to move a key vault but your organization has a policy to deny creating a key vault in the target resource group. The returned error code is RequestDisallowedByPolicy.

For more information about policies, see What is Azure Policy?

Hope this helps!

Your answer

Abiola Akinbade 29,405 Reputation points Volunteer Moderator

2025-04-06T19:20:51.1566667+00:00

This is because Certificates associated with App Services or stored in Key Vault are not supported by Azure Resource Mover or Move operations

See: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources#microsoftkeyvault

Instead of moving dependent resources, you can configure the resources you are moving to use equivalent resources in the target region. This requires manually configuring the resource mappings in the target region

See reference: https://learn.microsoft.com/en-us/answers/questions/2224975/error-moving-resources-between-azure-subscriptions

You can mark it 'Accept Answer' and 'Upvote' if this helped you

(Please note: If you have Priority Community support please wait for a dedicated Microsoft support representative to assist you, as they have access to the necessary backend resources. If you have not yet opened a support case, we recommend reaching out through the support channel available under your subscription level.)

Regards,

Abiola
Vinod Pittala 3,695 Reputation points Microsoft External Staff Moderator

2025-04-08T01:27:03.84+00:00

Hello Ali Price,

I wanted to follow up on the answer Abiola Akinbade provided regarding the issue you encountered. Have you had a chance to review it? I would like to ensure that the issue has been resolved to your satisfaction or if there is any further assistance you might need.

Please don't hesitate to reach out, as we are always here to help and support you.

Thank you
Vinod Pittala 3,695 Reputation points Microsoft External Staff Moderator

2025-04-10T05:34:34.0866667+00:00

Hi Ali Price,

I just wanted to check if the above provided solution worked for you or if you need any further assistance?

Please feel free to let us know, as we are always here to help whenever you need us.

Additionally, if you have a moment, please do upvote it if the information provided has been helpful. This can be beneficial to other community members and would be greatly appreciated.

Thank you.
Sirra Sneha 550 Reputation points Microsoft External Staff Moderator

2025-04-22T06:39:08.0533333+00:00

Hi @Ali Price ,

Just following up to see if you're still facing the issue with moving resources between subscriptions. Were you able to resolve it by manually reconfiguring the certificate or setting up the equivalent resources in the target subscription?

If you need any help exporting/importing the certificate or updating the App Service bindings, feel free to share more details.
Madugula Jahnavi 495 Reputation points Microsoft External Staff Moderator

2025-04-23T11:56:52.4133333+00:00

Hello Ali Price, We haven't heard any response from you. Could you respond to the above comment and also have you checked that the certificate is linked to a Key Vault!
Madugula Jahnavi 495 Reputation points Microsoft External Staff Moderator

2025-04-24T14:43:39.6533333+00:00

Hello Ali Price, Could you respond to the above provided comment to look into the issue for further investigation?
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2025-04-29T12:59:53.98+00:00

@Ali Price Sorry for the delayed response.

This is related to the Policy check that ARM does as part of the move operation, although the error message looks like there’s a misconfiguration for one of the properties where a fully qualified resource ID is expected. Have you investigated why this is the case?

See FAQ here:

What does the error code "RequestDisallowedByPolicy" mean?

Resource Manager validates your move request before attempting a move. This validation includes checking policies defined for the resources involved in the move. For example, the validation fails when you're attempting to move a key vault but your organization has a policy to deny creating a key vault in the target resource group. The returned error code is RequestDisallowedByPolicy.

For more information about policies, see What is Azure Policy?

Hope this helps!

Share via

Can't move resources to different subscription

Your answer