Cannot delete virtual network, subnet in use by /serviceAssociationLinks/legionservicelink and cannot be deleted

Question

Cannot delete virtual network, subnet in use by /serviceAssociationLinks/legionservicelink and cannot be deleted

Ryland DeGregory 0

I am trying to delete a Virtual Network with 1 subnet. That subnet that was at one point in use by a Flex Consumption Function App Virtual Network Integration. The Function App has long since been deleted, but I cannot delete the Virtual Network due to the stuck service association link (aka subnet delegation).

Screenshot 2025-04-22 at 8.58.51 PM The CorrelationID for the error is: 20367dc6-72ae-4240-8a9e-fd56db166fa9

I have already tried re-creating a Function App with the same name, as was recommended in other Q&A threads, but that has not worked. The only effective solution I have seen from other, similar threads is to have Microsoft Support clear the stuck resource, but I do not have a support plan as this is in my personal Azure Subscription.

Can anyone assist me?

Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-07T14:30:54.2333333+00:00
Hello Ryland DeGregory,

Apologies for the delayed response. Could you please try the following command and let us know the outcome so we can assist you further?

"The error indicates a stuck service association link or delegation. Let's try removing it via Azure CLI:

Step 1: Identify the Link Run this command to check for any existing service association links:
az network vnet subnet show \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name> \ --query "serviceAssociationLinks"

Step 2: Remove Delegation or Link (If Found) If you see a link related to Microsoft.Web/serverfarms or legionservicelink, or if the delegation exists, you can use this command to remove the delegation and/or link: To remove the delegation:
az network vnet subnet update \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name> \ --delegations ""
To remove a service association link:
az network vnet subnet update \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name> \ --remove serviceAssociationLinks \ --service-association-links <resource_id_of_the_link>

Note: Be careful to replace <resource_id_of_the_link> with the actual ID of the link.

Step 3: Attempt Subnet Deletion After removing the delegation or service association link, try deleting the subnet:
az network vnet subnet delete \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name>

Step 4: Delete the Virtual Network, Once the subnet is deleted, attempt to delete the Virtual Network:
az network vnet delete \ --resource-group <your_resource_group_name> \ --name <your_vnet_name>

Also for your better understanding refer this Removing Azure Functions using Flex Consumption SKU from a subnet leaves it in a corrupted state.
Ryland DeGregory 0 Reputation points

2025-05-07T22:37:34.8033333+00:00

Hello @Loknathsatyasaivarma Mahali ,

I tried running the commands you provided from Azure Cloud Shell, but both failed.

Delegation removal command failed with error:

Service Association removal command failed with error:

If you look at the Azure CLI docs: https://learn.microsoft.com/en-us/cli/azure/network/vnet/subnet?view=azure-cli-latest#az-network-vnet-subnet-update, there is no parameter with that name. I'm not sure where you got that from, as the StackOverflow you linked doesn't reference it either. Was that an AI-generated response that you accepted as fact without confirming (I see the opening quote where you copied it from another page)? ;)

Please advise on a working solution, as I can generate fake AZ CLI commands with ChatGPT myself, and that's not why I reached out for help from Microsoft Support. :)
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-08T11:45:06.41+00:00

Hello Ryland DeGregory,

I have tested this in my environment and performed the provided CLI command, which worked for us. For your reference, please see the attached image:

Where I can able to successfully Delete the VNET attached to the function App. So if the above provided doesn't helped you please try the -Force Flag from this document and try deleting the VNET.

Also please share the update on this issue, so we can assist you further on this.
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-09T16:31:44.8133333+00:00

Hello Ryland DeGregory,

Just checking into see if the above provided information help in better understanding, if you have any further concerns, please feel free to drop them here.
Ryland DeGregory 0 Reputation points

2025-05-09T19:56:55.2833333+00:00

Hello @Loknathsatyasaivarma Mahali ,

This is not an option for me. As I stated in my original question, the Function App itself was deleted months ago, and only the Virtual Network remains. There is no way for me to remove the virtual network integration of a Function App that does not exist.

Additionally, there is no document shared in your reply.

Other tickets in Microsoft Q&A like this have been routed to the product team to remove the stuck delegation. Can this please be escalated as such?
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-13T13:45:45.71+00:00

Hello Ryland DeGregory,
Could you kindly check the private message and provide the necessary details to facilitate further troubleshooting of the issue.

Here is the reference link on How to access & Data Privacy policy of private messages in Microsoft Q&A.
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-14T13:56:06.69+00:00

Hello Ryland DeGregory,

I am following up to see if you had an opportunity to review my previous message and provide the requested details to help us troubleshoot the issue further.
Ryland DeGregory 0 Reputation points

2025-05-15T02:14:18.94+00:00

Hello @Loknathsatyasaivarma Mahali ,

I have provided the requested details in the private message. Thank you.
LeelaRajeshSayana-MSFT 17,866 Reputation points Moderator

2025-06-09T13:48:05.2466667+00:00

@Ryland DeGregory Apologies for the delay in handling this issue. Our team has cleaned the backend data which ended in a bad state. you should be able to perform the delete operation now. Can you please give it a try and let us know if you still run into any issues?

2 answers

Your answer

Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-07T14:30:54.2333333+00:00

Hello Ryland DeGregory,

Apologies for the delayed response. Could you please try the following command and let us know the outcome so we can assist you further?

"The error indicates a stuck service association link or delegation. Let's try removing it via Azure CLI:

Step 1: Identify the Link Run this command to check for any existing service association links:
az network vnet subnet show \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name> \ --query "serviceAssociationLinks"

Step 2: Remove Delegation or Link (If Found) If you see a link related to Microsoft.Web/serverfarms or legionservicelink, or if the delegation exists, you can use this command to remove the delegation and/or link: To remove the delegation:
az network vnet subnet update \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name> \ --delegations ""
To remove a service association link:
az network vnet subnet update \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name> \ --remove serviceAssociationLinks \ --service-association-links <resource_id_of_the_link>

Note: Be careful to replace <resource_id_of_the_link> with the actual ID of the link.

Step 3: Attempt Subnet Deletion After removing the delegation or service association link, try deleting the subnet:
az network vnet subnet delete \ --resource-group <your_resource_group_name> \ --vnet-name <your_vnet_name> \ --name <your_subnet_name>

Step 4: Delete the Virtual Network, Once the subnet is deleted, attempt to delete the Virtual Network:
az network vnet delete \ --resource-group <your_resource_group_name> \ --name <your_vnet_name>

Also for your better understanding refer this Removing Azure Functions using Flex Consumption SKU from a subnet leaves it in a corrupted state.
Ryland DeGregory 0 Reputation points

2025-05-07T22:37:34.8033333+00:00

Hello @Loknathsatyasaivarma Mahali ,

I tried running the commands you provided from Azure Cloud Shell, but both failed.

Delegation removal command failed with error:

Service Association removal command failed with error:

If you look at the Azure CLI docs: https://learn.microsoft.com/en-us/cli/azure/network/vnet/subnet?view=azure-cli-latest#az-network-vnet-subnet-update, there is no parameter with that name. I'm not sure where you got that from, as the StackOverflow you linked doesn't reference it either. Was that an AI-generated response that you accepted as fact without confirming (I see the opening quote where you copied it from another page)? ;)

Please advise on a working solution, as I can generate fake AZ CLI commands with ChatGPT myself, and that's not why I reached out for help from Microsoft Support. :)
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-08T11:45:06.41+00:00

Hello Ryland DeGregory,

I have tested this in my environment and performed the provided CLI command, which worked for us. For your reference, please see the attached image:

Where I can able to successfully Delete the VNET attached to the function App. So if the above provided doesn't helped you please try the -Force Flag from this document and try deleting the VNET.

Also please share the update on this issue, so we can assist you further on this.
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-09T16:31:44.8133333+00:00

Hello Ryland DeGregory,

Just checking into see if the above provided information help in better understanding, if you have any further concerns, please feel free to drop them here.
Ryland DeGregory 0 Reputation points

2025-05-09T19:56:55.2833333+00:00

Hello @Loknathsatyasaivarma Mahali ,

This is not an option for me. As I stated in my original question, the Function App itself was deleted months ago, and only the Virtual Network remains. There is no way for me to remove the virtual network integration of a Function App that does not exist.

Additionally, there is no document shared in your reply.

Other tickets in Microsoft Q&A like this have been routed to the product team to remove the stuck delegation. Can this please be escalated as such?
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-13T13:45:45.71+00:00

Hello Ryland DeGregory,
Could you kindly check the private message and provide the necessary details to facilitate further troubleshooting of the issue.

Here is the reference link on How to access & Data Privacy policy of private messages in Microsoft Q&A.
Loknathsatyasaivarma Mahali 2,685 Reputation points Moderator

2025-05-14T13:56:06.69+00:00

Hello Ryland DeGregory,

I am following up to see if you had an opportunity to review my previous message and provide the requested details to help us troubleshoot the issue further.
Ryland DeGregory 0 Reputation points

2025-05-15T02:14:18.94+00:00

Hello @Loknathsatyasaivarma Mahali ,

I have provided the requested details in the private message. Thank you.
LeelaRajeshSayana-MSFT 17,866 Reputation points Moderator

2025-06-09T13:48:05.2466667+00:00

@Ryland DeGregory Apologies for the delay in handling this issue. Our team has cleaned the backend data which ended in a bad state. you should be able to perform the delete operation now. Can you please give it a try and let us know if you still run into any issues?

Answer 1

Ryland DeGregory 0

Thank you @LeelaRajeshSayana-MSFT ,

I was able to successfully delete the Virtual Network. I appreciate your assistance.

Answer 2

Ryland DeGregory 0

Thank you @LeelaRajeshSayana-MSFT ,

I was able to successfully delete the Virtual Network. I appreciate your assistance.

Share via

Cannot delete virtual network, subnet in use by /serviceAssociationLinks/legionservicelink and cannot be deleted

2 answers

Your answer