Virtual Network: Subnet Deletion Blocked by Orphaned Power Platform Service Association Link

AndersonGuimaraes-6487 0 Reputation points
2026-10-08T19:11:55.12+00:00

Problem description

I am trying to delete an Azure subnet, but the operation fails because the subnet is reported as being in use by a Power Platform Service Association Link (SAL) named PowerPlatformSAL.

The subnet deletion error indicates that the subnet is still referenced by a Service Association Link and therefore cannot be deleted.

Based on my investigation, the SAL appears to be orphaned because I cannot identify any existing Power Platform resource that owns it.

Environment

  • Azure Virtual Network
  • Dedicated subnet previously used for Power Platform networking
  • Service Association Link (SAL): PowerPlatformSAL
  • Linked Resource Type: Microsoft.PowerPlatform/vnetaccesslinks

The subnet is delegated to:

Microsoft.PowerPlatform/vnetaccesslinks

What I've already tried

Verified subnet configuration

The subnet contains:

  • A delegation to Microsoft.PowerPlatform/vnetaccesslinks
  • A Service Association Link named PowerPlatformSAL
  • The SAL has:
    • allowDelete = false
      • provisioningState = Succeeded

Searched for Power Platform resources

I searched the subscription for:

  • Microsoft.PowerPlatform/vnetaccesslinks
  • Microsoft.PowerPlatform/enterprisePolicies

No resources of either type were found.

Attempted direct SAL deletion

I attempted to delete the Service Association Link directly through Azure Resource Manager APIs.

The operation failed with an authorization error indicating that the SAL is managed by the resource provider and cannot be deleted directly.

Attempted subnet deletion

The subnet deletion continues to fail because Azure reports that the subnet is in use by:

PowerPlatformSAL

Checked provider registration

The Microsoft.PowerPlatform resource provider is registered in the subscription and exposes the enterprisePolicies resource type, but no associated resources are present.

Current findings

At this point, the following appears to be true:

  • The subnet contains an active Service Association Link named PowerPlatformSAL.
  • The SAL references Microsoft.PowerPlatform/vnetaccesslinks.
  • No corresponding Power Platform resources can be found in the subscription.
  • The SAL cannot be deleted directly through ARM APIs.
  • The subnet cannot be deleted while the SAL exists.

This leads me to believe the subnet contains an orphaned Power Platform Service Association Link.

Question

    • How did you identify the owning Power Platform resource ?
    • Is there a supported self-service process to remove the orphaned SAL?

Any guidance would be greatly appreciated.

Resource Group: rg-calsaver-qa

Virtual Network: vnet-calsaver-qa-eus2

Subnet: vnet-data-gateway

Service Association Link: PowerPlatformSAL

Linked Resource Type: Microsoft.PowerPlatform/vnetaccesslinks

Support request number is 2610080040006180

Azure Virtual Network
Azure Virtual Network

An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.

1 answer

Sort by: Oldest
Most helpful Newest Oldest
  1. Rukshan edirisinghe 2,365 Reputation points
    2026-10-09T02:59:18.23+00:00

    Hi @AndersonGuimaraes-6487

    On your second question first: there isn't a self-service way to remove it. A Service Association Link belongs to the resource provider that created it, which is why your direct ARM delete is refused. Only Microsoft.PowerPlatform can release it, so your support case is the right route for the final removal.

    On finding the owner: your subnet is named vnet-data-gateway, so it was most likely used by a VNet data gateway. Those are managed in Power Platform, not as Azure resources, which is why your subscription search came back empty.

    1. Sign in to the Power Platform admin center and open the virtual network data gateways list. Check across environments, since the gateway may have been created by someone else on your team.
    2. If a gateway still uses this VNet and subnet, remove it. Microsoft notes it can take 48 to 72 hours after removing the last gateway before the subnet can be deleted.
    3. Keep the Microsoft.PowerPlatform provider registered while this cleans up, then retry the delete.
    4. If no gateway exists anywhere, the link really is orphaned. Add that finding to your open support case so the team can have the Power Platform side release it.

    You may also want to edit the subscription ID out of your post and keep it only in the support case.

    Do you know who on your team originally set up the data gateway?

    If this helps you get the subnet deleted, please consider accepting it as the answer. If the gateway list is empty and support needs more detail, let me know and I'll be happy to keep helping.

    Reference:

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.