This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
I tried to remove a Resource Group but due to ignorance something went wrong causing a "invalid state". I had created a container app using Terraforms and I tried to remove that. Since it is a while ago I don't remember if it was trough a Terraform destroy action or that I did it using the portal but I removed everything in the resource group as intended. Except one resource everything was removed. The thing that still exists is a container app. I did try to remove in manually again but get an error, that I do have the right permissions but "however, the access is denied because of the deny assignment with name"
How do I force remove this resource?
I already found this article: https://learn.microsoft.com/en-us/answers/questions/1863369/orphan-resource-group-wont-delete
but it didn't help because there are no lock, there is no delployment stack and the resouce-group is also in a invalid state. If I run: "remove-azresource -ResourceId '/subscriptions/000000-0000-0000-0000-0000000000/resourceGroups/EBI-TerraFormTest_FunctionApps_0000000-0000-0000-0000-0000000000' -Force" I got Remove-AzResource: ResourceGroupNotFound : Resource group 'EBI-TerraFormTest_FunctionApps_0000000-0000-0000-0000-0000000000' could not be found.
@LeelaRajeshSayana-MSFT Thank you for you response. I missed it for a week because it didn't show up until I posted my answer a few minutes ago. As said I found my answer myself, and didn't need to go that route. So the "deployment stack lock" did his work and prevented a non working environment.
This morning I have found the cause. The created "Container App" is used by the "Function App" which is deployed in/part of a "Container Apps Environment". Removing the function and "Container Apps Environment" makes it possible to delete the "Container App" too
Hi @Johannes Thanks for letting me know what worked for you and sharing your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I have added your solution to my response and reposted your solution in case you'd like to accept the answer.
If you have any other questions, please let me know. Thank you again for your time and patience throughout this issue.
Hi @Johannes Greetings! Welcome to Microsoft Q&A forum. Thank you for posting this question here.
Considering that the resource group is in invalid state, can you try running the following command using Azure CLI and see if it helps in removing the resource group
az group delete --name <YourResourceGroupName> --yes --no-wait
If the resource group fails to delete, run the following command against the resource group to list any deny assignments.
az role assignment list --scope "/subscriptions/000000-0000-0000-0000-0000000000/resourceGroups/YourResourceGroupName" --output json | jq '.[] | select(.roleDefinitionName=="DenyAssignment")'
If you find any deny assignments, you can run the following command to delete it
az role assignment delete --assignee <PrincipalId> --role "DenyAssignment" --scope "/subscriptions/<SubscriptionId>/resourceGroups/<YourResourceGroupName>"
Try deleting the resource group again with the first command after removing the deny assignments. If the command fails, try the following command to explicitly delete the Container App and then delete the resource group
az resource delete --ids /subscriptions/000000-0000-0000-0000-0000000000/resourceGroups/<YourResourceGroupName>/providers/Microsoft.App/containerApps/<ContainerAppName>
Please let us know if you still cannot delete the resource group after trying the above steps> Update
The created "Container App" is used by the "Function App" which is deployed in/part of a "Container Apps Environment". Removing the function and "Container Apps Environment" makes it possible to delete the "Container App"