Skip to content

az identity federated-credential delete doesn't work when UAMI has delete lock #28242

@Vegoo89

Description

@Vegoo89

Describe the bug

Seems like federated identity delete lock is inherited from UAMI to Federated Credentials and because of that command fails with (ScopedLocked) error

Related command

az identity federated-credential delete --identity-name <uami_name> --name <identity_name> -g <uami_rg> --yes

Errors

(ScopeLocked) The scope '<identity_id>' cannot perform delete operation because following scope(s) are locked: '<uami_id>'. Please remove the lock and try again.

Issue script & Debug output

Since I can't copy it from work I can just tell that debug doesn't provide any additional, useful insight for resolving this issue

Expected behavior

UAMI delete lock is not inherited to Federated Credential and Federated Credential is removed.

Environment Summary

azure-cli 2.48.1

core 2.48.1
telemetry 1.0.8

Extensions:
aks-preview 0.5.137
quota 0.1.0

Dependencies:
msal 1.20.0
azure-mgmt-resource 22.0.0

Additional context

No response

Metadata

Metadata

Assignees

Labels

Auto-AssignAuto assign by botAuto-ResolveAuto resolve by botManaged IdentityFor `az identity` onlyService AttentionThis issue is responsible by Azure service team.act-identity-squadcustomer-reportedIssues that are reported by GitHub users external to the Azure organization.questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as that

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions