Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
Orphaned serviceAssociationLink prevents subnet deletion.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 49%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
rhod3rz
0
Reputation points
Orphaned serviceAssociationLink prevents subnet deletion.
Subnet:
snet-uks-agent
VNet:
vnet-dev-uks-01
Resource group:
rg-dev-uks-01
Subscription:
2bc7b65e-18d6-42ae-afb2-e66d50be6b05
Orphaned resource:
/subscriptions/2bc7b65e-18d6-42ae-afb2-e66d50be6b05/resourceGroups/rg-dev-uks-01/providers/Microsoft.Network/virtualNetworks/vnet-dev-uks-01/subnets/snet-uks-agent/serviceAssociationLinks/legionservicelink
The Azure AI Foundry account has been deleted and successfully purged.
No Microsoft.App/managedEnvironments resources remain in the subscription.
The service association link remains with:
- linkedResourceType: Microsoft.App/environments
- allowDelete: false
- provisioningState: Succeeded
Deleting the subnet returns InUseSubnetCannotBeDeleted.
Deleting the SAL directly returns UnauthorizedClientApplication.
Please perform backend removal of the orphaned legionservicelink.
Azure Virtual Network
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 49%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVL%3C/text%3E%3C/svg%3E)
Vinayteja Lellela 100 Reputation points Microsoft External Staff Moderator2026-07-31T00:58:31.7+00:00 Hello **rhod3rz,
**Based on the information provided, the subnet appears to be blocked by an orphaned Service Association Link (SAL) (
legionservicelink) that is still associated with the subnet despite the related service having been deleted and purged.As an initial remediation step, please attempt to purge any unused virtual network integration references associated with the subnet by running the following Azure CLI command. This operation is intended to remove stale integration metadata that may prevent subnet deletion.
- az rest --method POST \
- --uri "/subscriptions/2bc7b65e-18d6-42ae-afb2-e66d50be6b05/providers/Microsoft.Web/locations/<LOCATION>/purgeUnusedVirtualNetworkIntegration?api-version=2024-04-01" \
- --body "{'subnetResourceId':'/subscriptions/2bc7b65e-18d6-42ae-afb2-e66d50be6b05/resourceGroups/rg-dev-uks-01/providers/Microsoft.Network/virtualNetworks/vnet-dev-uks-01/subnets/snet-uks-agent'}"
Please ensure that:
-
<LOCATION>matches the region of the virtual network/subnet. - The account executing the command has at least Network Contributor permissions on the subnet.
A successful execution is expected to return:
- {
- "message": "Purged unused virtual network integration.",
- "swiftVirtualNetwork": null
- }
After the operation completes, please retry deleting the subnet and share the results. If the issue persists or the purge operation returns an error, please provide the command output and updated error details so that further investigation can be performed.
This is the recommended approach for addressing orphaned virtual network integration references before considering additional remediation steps.
Can you please update us if the action plan provided was helpful?
Should there be any follow-up questions or concerns, please let us know and we shall try to address them.
If these answer your question, click "Upvote" which may be beneficial to other community members reading this thread.
-
rhod3rz 0 Reputation points
2026-07-31T10:32:26.23+00:00 Hello,
I successfully ran the requested purge operation. It returned:
{
"message": "Purged unused virtual network integration.",
"swiftVirtualNetwork": null
}
I then retried deleting the subnet using:
az network vnet subnet delete --resource-group "rg-dev-uks-01" --vnet-name "vnet-dev-uks-01" --name "snet-uks-agent"
The deletion still fails with:
InUseSubnetCannotBeDeleted
The subnet remains blocked by:
/subscriptions/2bc7b65e-18d6-42ae-afb2-e66d50be6b05/resourceGroups/rg-dev-uks-01/providers/Microsoft.Network/virtualNetworks/vnet-dev-uks-01/subnets/snet-uks-agent/serviceAssociationLinks/legionservicelink
The remaining SAL has:
linkedResourceType: Microsoft.App/environments
allowDelete: false
provisioningState: Succeeded
The Microsoft.Web purge therefore did not remove the Microsoft.App/environments service association link.
The owning Azure AI Foundry resource has already been deleted and purged, and no Microsoft.App managed environment remains accessible in the subscription.
Please escalate this to the Microsoft.App/Azure Container Apps or Azure AI Foundry networking team and perform backend removal of the orphaned legionservicelink.
-
-
Vinayteja Lellela 100 Reputation points Microsoft External Staff Moderator
2026-08-05T17:24:24.88+00:00 Hello **rhod3rz,
**I have sent a private message requesting a few details. Please provide them there.
Thank you. -
Vinayteja Lellela 100 Reputation points Microsoft External Staff Moderator
2026-08-07T00:44:54.16+00:00 Hello **rhod3rz,
following up to see if you had a chance to check the above response and if it was helpful. Please let me know if you have any questions.
Sign in to comment
Sign in to answer