In my Storage account, trying to add a second VNET, getting error about ServiceEndpoints

Question

In my Storage account, trying to add a second VNET, getting error about ServiceEndpoints

Christian Lavallee 20

I have a vnet with 2 subnets added to the Firewalls and virtual networks of my Storage Account. Trying to add another VNET with subnets from another resource-group and region. I get this info when adding the subnet : The following networks don’t have service endpoints enabled for 'Microsoft.Storage.Global'. Enabling access will take up to 15 minutes to complete. After starting this operation, it is safe to leave and return later if you do not wish to wait.

Then when I click Enable, I get this error : One or more operations enabling selected networks with service endpoints for 'Microsoft.Storage.Global' failed. You can retry this operation, or contact support.

With a popup with that message : Failed to enable service endpoints for 1 out of 1 virtual network(s). Subnet /subscriptions/xxx/resourceGroups/for-recovery/providers/Microsoft.Network/virtualNetworks/vm-recovery-vnet/subnets/default has ServiceEndpoint entries for both 'Microsoft.Storage' and 'Microsoft.Storage.Global' together. Please use either one of them at a time.

Can't figure what to do to add that subnet.

1 answer

Your answer

Answer 1

Syed Aaqid Ali 490 Microsoft External Staff

Hi Christian Lavallee,

The error message indicates that the subnet you are trying to add has service endpoints for both 'Microsoft.Storage' and 'Microsoft.Storage.Global' enabled simultaneously.

According to the guidelines, local and cross-region service endpoints cannot coexist on the same subnet. To proceed, you should:

--Remove the existing service endpoint for 'Microsoft.Storage' or 'Microsoft.Storage.Global' from the subnet.

--After removing the conflicting service endpoint, you can then enable the desired service endpoint ('Microsoft.Storage.Global') for the subnet.

Make sure to wait for the changes to propagate, as enabling service endpoints can take some time.

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members. User's image

If you have any other questions or are still running into more issues, let me know in the "comments" and I would be happy to help you

Christian Lavallee 20 Reputation points

2025-04-14T20:59:10.3066667+00:00

My storage account is in Canada Central. The linked vnet is also in Canada Central. The VNET I want to add is in East US which is not the paired region for Canada Central.

Is it still possible to do this without moving the vnet from East US to Canada East?
Syed Aaqid Ali 490 Reputation points Microsoft External Staff

2025-04-15T17:00:15.97+00:00

Christian Lavallee, yes you can add a VNet from a different region (East US) to your Azure Storage account located in Canada Central using cross-region service endpoints but Local and cross-region service endpoints can't coexist on the same subnet. To replace existing service endpoints with cross-region ones, delete the existing Microsoft.Storage endpoints and re-create them as cross-region endpoints (Microsoft.Storage.Global).
Syed Aaqid Ali 490 Reputation points Microsoft External Staff

2025-04-16T19:53:40.4966667+00:00

Christian Lavallee, Please let us know if the response above was helpful or if you require any further assistance. I would be happy to assist.
Syed Aaqid Ali 490 Reputation points Microsoft External Staff

2025-04-17T23:19:44.85+00:00

Hi Christian Lavallee, I wanted to follow up and see if the provided information helped (pointed you in the right direction) > please do not forget to “up-vote”. which might be beneficial to other community members reading this thread. And, if you have any further queries do let us know.

Share via

In my Storage account, trying to add a second VNET, getting error about ServiceEndpoints

1 answer

Your answer