app service does not see newly created ACR and private link to add to new app creation

Question

app service does not see newly created ACR and private link to add to new app creation

David Kroll 0

then creating a new app service and using the option to connect to container registry it does not show any configured Microsoft container registrys. we have run the Set-AzContext -Subscription and az account set --subscription az provider register --namespace Microsoft.ContainerRegistry

Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-05-30T01:08:36.24+00:00

Hi David Kroll,

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If it was helpful, please click "Upvote" on this post to let us know.

Thank You.
Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-03T01:10:15.8433333+00:00

Hi David Kroll,

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If it was helpful, please click "Upvote" on this post to let us know.

Thank You.
David Kroll 0 Reputation points

2025-06-04T14:12:43.35+00:00

I need something better than this for support on this problem. I was working hand in hand with a MS nonprofit enablement resource to create this first acr in a new azure instance and its not accessible and none of your permissions checks are yielding anything of merit.
Anusree Nashetty 4,710 Reputation points Microsoft External Staff Moderator

2025-06-09T23:02:39.91+00:00

Hi David Kroll,

Did you check the information provided by Siva Pavuluri. If you have any further queries, let us know. If the information is helpful, please click on Upvote.

1 answer

Your answer

Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-05-30T01:08:36.24+00:00

Hi David Kroll,

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If it was helpful, please click "Upvote" on this post to let us know.

Thank You.
Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-03T01:10:15.8433333+00:00

Hi David Kroll,

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If it was helpful, please click "Upvote" on this post to let us know.

Thank You.
David Kroll 0 Reputation points

2025-06-04T14:12:43.35+00:00

I need something better than this for support on this problem. I was working hand in hand with a MS nonprofit enablement resource to create this first acr in a new azure instance and its not accessible and none of your permissions checks are yielding anything of merit.
Anusree Nashetty 4,710 Reputation points Microsoft External Staff Moderator

2025-06-09T23:02:39.91+00:00

Hi David Kroll,

Did you check the information provided by Siva Pavuluri. If you have any further queries, let us know. If the information is helpful, please click on Upvote.

Answer 1

Siva Pavuluri 570 Microsoft External Staff Moderator

Hi David Kroll,

I understand your concern regarding the issue where the App Service is unable to connect to the Container Registry. Please ensure that both the Azure App Service and the Azure Container Registry are located within the same Azure subscription and region. If they are in different subscriptions, this could prevent visibility.

Additionally, please verify that the necessary admin permissions are enabled for your Container Registry to allow proper access.
User's image If your Azure Container Registry (ACR) has public network access restricted, please ensure that private endpoints are properly configured and functioning as expected.how-to-create-a-azure-app-service-with-a-private-azure-container-registry

Please refer the below documents for your reference.
https://learn.microsoft.com/en-us/azure/container-registry/container-registry-private-link
https://techcommunity.microsoft.com/blog/appsonazureblog/troubleshooting-guide-resolving-azure-app-services-image-pull-issues-from-azure-/4010201

If you have any further queries, let me know. If the information is helpful, please click on Upvote.

Thank you.

David Kroll 0 Reputation points

2025-06-04T14:17:32.7866667+00:00

we have 3 subscriptions, a tenant root, a mgmt. subscription for services needed to support the implementation LIKE ACR which may need public and/or private networks, and an external subscription for hosting the externally facing components. when changing our focus to the subscription and validating my rbac permissions look like they should allow me to do things that I am getting permission denied or other errors.
Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-05T07:47:34.3066667+00:00

Hi David Kroll,

I understand you're encountering a permission issue while accessing Azure Container Registry (ACR). When your registry is configured with the "RBAC Registry + ABAC Repository Permissions" mode, the standard AcrPull, AcrPush, and AcrDelete roles are not honored.

Instead, such registries only honor the following roles:

Container Registry Repository Reader – for reading images.

Container Registry Repository Writer – for writing images.

Container Registry Repository Contributor – for full access (read, write, delete).

These roles can include optional ABAC conditions to restrict access to specific repositories.

Please note: These roles do not provide access to list repositories (catalog listing). To enable listing of repositories (without accessing their content), you need to assign the Container Registry Repository Catalog Lister role separately. This role does not support ABAC and grants permission to list all repositories within the registry.

Please find the reference document:
https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz#validate-identity-permissions-and-role-assignments

https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions?tabs=azure-portal
Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-10T00:28:49.5166667+00:00

Hi David Kroll,

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

Thank You.
Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-11T00:34:28.92+00:00

Hi David Kroll,

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

Thank You.

Share via

app service does not see newly created ACR and private link to add to new app creation

1 answer

Your answer