How to move App Service between subscription - Error code : BadRequest, cible : Microsoft.Web/certificates

Question

How to move App Service between subscription - Error code : BadRequest, cible : Microsoft.Web/certificates

JC 0

Hello,

I got the Microsoft Azure Sponsorship subscription, so I want to move all my services to it.

I can move many of my services but when I want to move WebApp, I got validation error with the following error:

La validation du déplacement de ressource a échoué. Informations de diagnostic : horodatage « 20250430T092251Z », ID d'abonnement « xxxxx-xxxxx-xxxxx », ID de suivi « 2xxxxx-xxxxx-xxxxx », ID de corrélation de demande « xxxxx-xxxxx-xxxxx ». (Code : ResourceMoveProviderValidationFailed) Please select all the Microsoft.Web resources from 'my-group' resource group for cross-subscription migration. Also, please ensure destination resource group 'new-group' doesn't have any Microsoft.Web resources before move operation. Here is the list of resources you have to move together: app (Microsoft.Web/sites) app (Microsoft.Web/sites) app (Microsoft.Web/sites) app (Microsoft.Web/sites) app (Microsoft.Web/sites) app (Microsoft.Web/sites) app (Microsoft.Web/sites) app (Microsoft.Web/sites) machine (Microsoft.Web/serverFarms) machine (Microsoft.Web/serverFarms) ... and 12 more. Please check link for more information. (code : BadRequest, cible : Microsoft.Web/certificates) Capture d’écran 2025-04-30 à 11.40.34

I select all the services (visible and hidden) but impossible to continue...

Thanks to help me !

Alekhya Vaddepally 820 Reputation points Microsoft External Staff

2025-04-30T14:50:40.97+00:00

Hi JC,
Azure is very special how app services are transferred to membership, especially when it includes Microsoft. WEB resources (eg web app, app service scheme and certificate).

When transferring app services between subscription, Azure you need to transfer all interdependent Microsoft. WEB resources simultaneously, in the same operation. If no related component (eg app is included as an app service certificate, app service plan, or vault certificate) or is already present in the destination, this step will fail.

Additionally, if a Microsoft. Web resources are already present in the target resource group, the operation will also fail. It is likely why you are looking at this verification error.

To solve it:

Ensure that you are selecting all the concerned Microsoft. Web resources from the source group:

Web apps (Microsoft. Web/sites)

App Service Scheme (Microsoft. Web/Server farms)

certificate (Microsoft.Web/certificates)

If any affiliated key vault using certificate binding

Ensure that the destination resource group (in target membership) is empty of Microsoft. Web resources.

You can either do:

Create a new, empty resource group, or remove any conflicting Microsoft. Web resources in the destination group before trying this step.

Do the move operation again using the Azure portal, CLI, or PowerShell, ensure that all dependence has been selected.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-resource-group-and-subscription?tabs=azure-cli
https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain?tabs=root%2Cazurecli#move-your-custom-domain-and-certificate
if you have any further concerns or queries, please feel free to reach out to us.
Alekhya Vaddepally 820 Reputation points Microsoft External Staff

2025-05-02T09:46:38.23+00:00

Hi JC,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Your answer

Alekhya Vaddepally 820 Reputation points Microsoft External Staff

2025-04-30T14:50:40.97+00:00

Hi JC,
Azure is very special how app services are transferred to membership, especially when it includes Microsoft. WEB resources (eg web app, app service scheme and certificate).

When transferring app services between subscription, Azure you need to transfer all interdependent Microsoft. WEB resources simultaneously, in the same operation. If no related component (eg app is included as an app service certificate, app service plan, or vault certificate) or is already present in the destination, this step will fail.

Additionally, if a Microsoft. Web resources are already present in the target resource group, the operation will also fail. It is likely why you are looking at this verification error.

To solve it:

Ensure that you are selecting all the concerned Microsoft. Web resources from the source group:

Web apps (Microsoft. Web/sites)

App Service Scheme (Microsoft. Web/Server farms)

certificate (Microsoft.Web/certificates)

If any affiliated key vault using certificate binding

Ensure that the destination resource group (in target membership) is empty of Microsoft. Web resources.

You can either do:

Create a new, empty resource group, or remove any conflicting Microsoft. Web resources in the destination group before trying this step.

Do the move operation again using the Azure portal, CLI, or PowerShell, ensure that all dependence has been selected.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-resource-group-and-subscription?tabs=azure-cli
https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain?tabs=root%2Cazurecli#move-your-custom-domain-and-certificate
if you have any further concerns or queries, please feel free to reach out to us.
Alekhya Vaddepally 820 Reputation points Microsoft External Staff

2025-05-02T09:46:38.23+00:00

Hi JC,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Share via

How to move App Service between subscription - Error code : BadRequest, cible : Microsoft.Web/certificates

Your answer