az network dns zone create does not work well if parent zone is not in the same resource group.

### Describe the bug

when using `az network dns zone create --name child.myname.com --resource-group mynewgroup --parent myname.com` azcli returns an error message indicating that the parent zone can not be found if the parent is not in the same resource group as the new child zone.

resource is created but it does not perform correct DNS resolution.

### Related command

`az network dns zone create`

### Errors

(ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptionsxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxx.stream' could not be found.
Code: ParentResourceNotFound
Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/xxxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxstream' could not be found.

### Issue script & Debug output

cli.knack.cli: Command arguments: ['network', 'dns', 'zone', 'create', '-g', 'vlscanadacentral', '--name', 'vls4.abcdomain.stream', '--parent', 'abcdomain.stream', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [, , ]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'network': ['azure.cli.command_modules.network', 'azure.cli.command_modules.privatedns']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: network 0.302 117 359
cli.azure.cli.core: privatedns 0.006 14 60
cli.azure.cli.core: Total (2) 0.308 131 419
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: Total (0) 0.000 0 0
cli.azure.cli.core: Loaded 130 groups, 419 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : network dns zone create
cli.azure.cli.core: Command table: network dns zone create
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate []
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/abc/.azure/commands/2024-09-01.16-05-35.network_dns_zone_create.480128.log'.
az_command_data_logger: command args: network dns zone create -g {} --name {} --parent {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [.add_subscription_parameter at 0x737f370e3240>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [.add_ids_arguments at 0x737f370e32e0>, .add_cache_arguments at 0x737f370e3420>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [, , .parse_ids_arguments at 0x737f370e3380>]
cli.azure.cli.core.auth.persistence: build_persistence: location='/home/abc/.azure/msal_token_cache.json', encrypt=False
cli.azure.cli.core.auth.binary_cache: load: /home/abc/.azure/msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-************
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Found 1 RTs matching {'environment': 'login.microsoftonline.com', 'home_account_id': '********.72f988bf-86f1-41af-91ab-2d7cd011db47', 'family_id': '1'}
msal.telemetry: Generate or reuse correlation_id: 0ae23551-018e-4e83-8d0a-15a9e98c153c
msal.application: Cache attempts an RT
urllib3.connectionpool: Starting new HTTPS connection (1): login.microsoftonline.com:443
urllib3.connectionpool: https://login.microsoftonline.com:443 "POST /********-****-****-****-************/oauth2/v2.0/token HTTP/1.1" 200 5904
msal.token_cache: event={
"client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
"data": {
"claims": "{\"access_token\": {\"xms_cc\": {\"values\": [\"CP1\"]}}}",
"refresh_token": "********",
"scope": [
"offline_access",
"https://management.core.windows.net//.default",
"openid",
"profile"
]
},
"environment": "login.microsoftonline.com",
"grant_type": "refresh_token",
"params": null,
"response": {
"access_token": "********",
"client_info": "eyJ1aWQiOiI3YmMxMWNiNS0xMWVkLTRhZWQtODkyNi0zZjRmN2I2NmMyOGEiLCJ1dGlkIjoiNzJmOTg4YmYtODZmMS00MWFmLTkxYWItMmQ3Y2QwMTFkYjQ3In0",
"expires_in": 4421,
"ext_expires_in": 4421,
"foci": "1",
"id_token": "********",
"scope": "https://management.core.windows.net//user_impersonation https://management.core.windows.net//.default",
"token_type": "Bearer"
},
"scope": [
"https://management.core.windows.net//user_impersonation",
"https://management.core.windows.net//.default"
],
"skip_account_creation": true,
"token_endpoint": "https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token"
}
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '22'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"location": "global"}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview HTTP/1.1" 201 546
cli.azure.cli.core.sdk.policies: Response status: 201
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'private'
cli.azure.cli.core.sdk.policies: 'Content-Length': '546'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'ETag': '10fb39ab-f925-423c-8abc-2b55cf9ce0dc'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'X-Powered-By': 'ASP.NET'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-resource-requests': '11999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '9a142299-d5b7-40aa-a942-d937f6d6d9d7'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:9a142299-d5b7-40aa-a942-d937f6d6d9d7'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: F36BC7EC7232429EB0E0C1F3831B9B17 Ref B: MNZ221060610035 Ref C: 2024-09-01T20:05:36Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"id":"\/subscriptions\/********-****-****-****-************\/resourceGroups\/vlscanadacentral\/providers\/Microsoft.Network\/dnszones\/vls4.abcdomain.stream","name":"vls4.abcdomain.stream","type":"Microsoft.Network\/dnszones","etag":"10fb39ab-f925-423c-8abc-2b55cf9ce0dc","location":"global","tags":{},"properties":{"maxNumberOfRecordSets":10000,"maxNumberOfRecordsPerRecordSet":null,"nameServers":["ns1-04.azure-dns.com.","ns2-04.azure-dns.net.","ns3-04.azure-dns.org.","ns4-04.azure-dns.info."],"numberOfRecordSets":2,"zoneType":"Public"}}
cli.azure.cli.command_modules.network.custom: Attempting to add delegation in the parent zone
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-************
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 3b8d9361-9820-4e26-b420-66f832f0b72f
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 308
cli.azure.cli.core.sdk.policies: Response status: 404
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '308'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 71A9BAC824B04A51909810ABA5E0BB44 Ref B: MNZ221060610007 Ref C: 2024-09-01T20:05:40Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'read' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}}
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-************
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 051a9713-240c-46ce-9ccf-18ba7008a11e
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '82'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"properties": {"NSRecords": [{"nsdname": "ns1-04.azure-dns.com."}], "TTL": 3600}}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 309
cli.azure.cli.core.sdk.policies: Response status: 404
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '309'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: CA4B2E4C7A5247AEBA8E42D647B6A656 Ref B: MNZ221060610019 Ref C: 2024-09-01T20:05:40Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:40 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}}
cli.azure.cli.command_modules.network.custom: (ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found.
Code: ParentResourceNotFound
Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found.
Could not add delegation in 'abcdomain.stream'

cli.knack.cli: Event: CommandInvoker.OnTransformResult [, ]
cli.knack.cli: Event: CommandInvoker.OnFilterResult []
{
"etag": "10fb39ab-f925-423c-8abc-2b55cf9ce0dc",
"id": "/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/vls4.abcdomain.stream",
"location": "global",
"maxNumberOfRecordSets": 10000,
"name": "vls4.abcdomain.stream",
"nameServers": [
"ns1-04.azure-dns.com.",
"ns2-04.azure-dns.net.",
"ns3-04.azure-dns.org.",
"ns4-04.azure-dns.info."
],
"numberOfRecordSets": 2,
"resourceGroup": "vlscanadacentral",
"tags": {},
"type": "Microsoft.Network/dnszones",
"zoneType": "Public"
}
cli.knack.cli: Event: Cli.SuccessfulExecute []
cli.knack.cli: Event: Cli.PostExecute []
az_command_data_logger: exit code: 0
cli.__main__: Command ran in 5.687 seconds (init: 0.073, invoke: 5.614)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 3799 in cache
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/az/bin/python3 /opt/az/lib/python3.11/site-packages/azure/cli/telemetry/__init__.py /home/abc/.azure"
telemetry.process: Return from creating process
telemetry.main: Finish creating telemetry upload process.

### Expected behavior

As per documentation and portal behavior, child dns zone should be able to operate successfully even if not created in the same group as the parent zone.

### Environment Summary

test: az --version
azure-cli 2.63.0

core 2.63.0
telemetry 1.1.0

Extensions:
serial-console 1.0.0b1
ssh 2.0.5
vm-repair 1.0.9

Dependencies:
msal 1.30.0
azure-mgmt-resource 23.1.1

Python location '/opt/az/bin/python3'
Extensions directory '/home/esv/.azure/cliextensions'

Python (Linux) 3.11.8 (main, Jul 31 2024, 03:39:39) [GCC 11.4.0]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

### Additional context

nothing to add

Start at the `az network dns zone create` command entry point and compare the request/debug output when the parent zone is in another resource group. Reproduce the reported `ParentResourceNotFound` response, then verify completion by confirming that the child zone resolves through the parent; no specific source file or test is named in the issue.

Written by the indexing model from the issue text.