Azure / Azure/azure-cli

`az identity federated-credential delete` doesn't work when UAMI has delete lock

Open
#28,242 3 comments 0 reactions 1 assignee Claimed by @zhoxing-ms View on GitHub
act-identity-squad Auto-Assign Auto-Resolve customer-reported Managed Identity question Service Attention
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

### Describe the bug

Seems like federated identity delete lock is inherited from UAMI to Federated Credentials and because of that command fails with `(ScopedLocked)` error

### Related command

`az identity federated-credential delete --identity-name --name -g --yes`

### Errors

```
(ScopeLocked) The scope '' cannot perform delete operation because following scope(s) are locked: ''. Please remove the lock and try again.
```

### Issue script & Debug output

Since I can't copy it from work I can just tell that debug doesn't provide any additional, useful insight for resolving this issue

### Expected behavior

UAMI delete lock is not inherited to Federated Credential and Federated Credential is removed.

### Environment Summary

```
azure-cli 2.48.1

core 2.48.1
telemetry 1.0.8

Extensions:
aks-preview 0.5.137
quota 0.1.0

Dependencies:
msal 1.20.0
azure-mgmt-resource 22.0.0
```

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.