Moving a Private Link Scope in Azure Arc

Hi Bryan

No, moving an Azure Arc Private Link Scope from one resource group to another does not necessitate re-enrolling the virtual machines (VMs) that are currently enrolled using that scope.

The Azure Arc Private Link Scope is a resource that facilitates secure, private connectivity between Azure Arc-enabled servers and Azure services over a private endpoint. This scope is associated with a specific resource group and region. When you move the Private Link Scope to a different resource group within the same subscription, the association between the scope and the enrolled VMs remains intact. The VMs continue to use the private endpoint for communication with Azure services, and there is no need to re-enroll them

However, it's important to note that the Azure Arc-enabled server and the Private Link Scope must be in the same Azure region. If the move results in the scope being in a different region than the enrolled VMs, you may need to reconfigure the VMs to ensure they can still communicate with the scope over the private endpoint

Additionally, when moving resources, ensure that any dependencies, such as virtual networks or DNS configurations, are also appropriately adjusted to maintain connectivity.

Please go to the overview page of the Private Link resource, click on "Move", and select the target resource group. The validation process will then begin, and if it doesn't pass, the reason for the failure will be displayed.

let us know if you have any further queries. I’m happy to assist you further.

Please do not forget to "Accept the answer” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.