Issue with Listing Specific Azure Web App Using Azure CLI

Harish S 0

Hello,

I am facing an issue where my customer is unable to locate a specific web app resource using the Azure CLI. Below are the details of the commands executed and the observed behaviour:

Command to list all web apps in a subscription:

az rest --method get --url https://management.azure.com/subscriptions/db2a93d4-166a-4ac4-8da6-b3da2dc68e0a/providers/Microsoft.Web/sites?api-version=2024-04-01

This command executes successfully but does not list the specific web app we are interested in.

Command to list all web apps by resource group:

az rest --method get --url https://management.azure.com/subscriptions/db2a93d4-166a-4ac4-8da6-b3da2dc68e0a/resourceGroups/RG_13238_NEXTGEN_DEV/providers/Microsoft.Web/sites?api-version=2024-04-01

This command lists the web app easychat successfully.

Could you please assist in understanding why the specific web app easychat does not appear when listing all apps in the subscription but does appear when querying within the resource group? What could be missing or misconfigured?

Thank you for your help!

1 answer

Manu Philip 19,586 Reputation points MVP

2025-02-19T16:13:26.0933333+00:00

Hi Harish S

I can see some reference says that the az cli can give different results due to the issue with the previous CLI versions. Could you please update az cli version and check the issue again?

I have checked both commands and looks works as expected

Here is my az cli version details

Hope this helps.

--please don't forget to upvote and Accept as answer if the reply is helpful--
Please sign in to rate this answer.
Harish S 0 Reputation points

2025-02-20T06:08:51.1133333+00:00

Thanks for your response.

Checked the command line version and we have: az version

{ "azure-cli": "2.53.1", "azure-cli-core": "2.53.1", "azure-cli-telemetry": "1.1.0", "extensions": {}}

Customer tried to upgrade but is locked into this version currently due to desktop controls.

Customer ran the command:
az rest --method get --url https://management.azure.com/subscriptions/db2a93d4-166a-4ac4-8da6-b3da2dc68e0a/providers/Microsoft.Web/sites?api-version=2024-04-01

This produced the same json output that was received from the curl command and python sdk in regards to the list of resources. The resource easychat WAS NOT in the list.

Customer ran this command:
az rest --method get --url https://management.azure.com/subscriptions/db2a93d4-166a-4ac4-8da6-b3da2dc68e0a/resourceGroups/RG_13238_NEXTGEN_DEV/providers/Microsoft.Web/sites?api-version=2024-04-01

The resource easychat WAS found in the output of the web apps from the resource level query. Also same json output as from the curl and python sdk.

From what I understand, it appears that the resource is not fetched through the subscription, yet it is visible when fetched via the resource group, which is odd. Since the resource group is a filter applied in addition to the subscription filter, any resource visible with a resource group call should also be visible with a subscription call, shouldn't it? Could there be something unique about this resource, perhaps related to permissions that we need to investigate?

Manu Philip 19,586 Reputation points MVP

2025-02-20T07:37:08.82+00:00

Hi Harish S

Let's try with the url has region name also.

For example, you may try with the region name where the application has deployed and see if it works!

There can be some delay in syncing the data between regions and that resolves automatically later

az rest --method get --url https://eastus.management.azure.com/subscriptions/db2a93d4-166a-4ac4-8da6-b3da2dc68e0a/resourceGroups/RG_13238_NEXTGEN_DEV/providers/Microsoft.Web/sites?api-version=2024-04-01

Harish S 0 Reputation points

2025-02-20T15:19:34.4833333+00:00

When I use the region name, I get an authentication failure error. However, I successfully fetched the "webapp" resource I'm interested in using the API below.

az rest --method get --url https://management.azure.com/subscriptions/db2a93d4-166a-4ac4-8da6-b3da2dc68e0a/resourceGroups/RG_13238_NEXTGEN_DEV/providers/Microsoft.Web/sites/easychat?api-version=2023-12-01

But why this specific resource doesn't show up for below API call?

az rest --method get --url https://management.azure.com/subscriptions/db2a93d4-166a-4ac4-8da6-b3da2dc68e0a/providers/Microsoft.Web/sites?api-version=2024-04-01

Could it be because permissions might be restricted at a higher scope but explicitly allowed at lower scopes like the resource group?

To provide additional context, my customer created this web app resource in his Azure account almost a year ago. We ingest these resources into our platform and although the resource is active in his account, he cannot see it on our platform. Our platform uses the following API call to ingest these types of resources.

https://learn.microsoft.com/en-us/rest/api/appservice/web-apps/list?view=rest-appservice-2023-12-01&tabs=HTTP

Manu Philip 19,586 Reputation points MVP

2025-02-20T16:43:36.12+00:00

Looks like a complete comparison study on all aspects especially the permission side, on a working webapp and unlisted one

Harish S 0 Reputation points

2025-02-21T05:58:18.4366667+00:00

Thanks for your insights. I have opened support ticket with azure. May be i will try to get on a call with them to show the behaviour
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Issue with Listing Specific Azure Web App Using Azure CLI

1 answer

Your answer