---
id: a5731fea-16e7-42b5-a86a-1c079bfc5361
---

# Azure Web App Resource Access and Permissions Issue

The incident type "Azure Web App Resource Access and Permissions Issue" refers to the situation where a web application hosted on the Azure platform is unable to access external resources or databases. This can occur due to incorrect connection string settings or access control settings. It is recommended to review the connection strings and access control settings, as well as check the network security group rules if the app is accessing Azure resources. Additionally, it is suggested to check the service connectors and web app networking settings to identify and resolve the issue.

### Parameters

```shell
export RESOURCE_GROUP="PLACEHOLDER"
export APP_NAME="PLACEHOLDER"
export CONNECTION_NAME="PLACEHOLDER"
export NSG_NAME="PLACEHOLDER"
export NSG_RULE_NAME="PLACEHOLDER"
export SERVER_NAME="PLACEHOLDER"
export DATABASE_NAME="PLACEHOLDER"
export SECRET="PLACEHOLDER"
```

## Debug

### Check the web app's connection strings

```shell
az webapp config connection-string list -g ${RESOURCE_GROUP} -n ${APP_NAME}
```

### Check the web app's access control settings

```shell
az webapp identity show -g ${RESOURCE_GROUP} -n ${APP_NAME}
```

### List web app connection

```shell
az webapp connection list -g ${RESOURCE_GROUP} -n ${APP_NAME}
```

### List web app's connection source configuration

```shell
az webapp connection list-configuration -g ${RESOURCE_GROUP} -n ${APP_NAME} --connection ${CONNECTION_NAME}
```

### Check web app networking settings

```shell
az webapp show -g ${RESOURCE_GROUP} -n ${APP_NAME} --query outboundIpAddresses
```

### List the network security group 

```shell
az network nsg rule list --nsg-name ${NSG_NAME} --resource-group ${RESOURCE_GROUP}
```

### Check network security group rules

```shell
az network nsg rule show --resource-group ${RESOURCE_GROUP_NAME} --nsg-name ${NSG_NAME} --name ${NSG_RULE_NAME}
```

## Repair

### Create connection between webapp and database.

```shell
#!/bin/bash

# Set variables
RESOURCE_GROUP=${RESOURCE_GROUP_NAME}
APP_NAME=${WEB_APP_NAME}
SERVER_NAME=${SERVER_NAME}
DATABASE_NAME=${DATABASE_NAME}
SECRET=${SECRET}


# Get a list of supported target services for App Service.
az webapp connection list-support-types -o table

# Create the connecction between webapp and SQL

az webapp connection create sql -g $RESOURCE_GROUP -n $APP_NAME --tg $RESOURCE_GROUP --server $SERVER_NAME --database $DATABASE_NAME --secret $SECRET
```

The incident type "Azure Web App Resource Access and Permissions Issue" refers to the situation where a web application hosted on the Azure platform is unable to access external resources or databases. This can occur due to incorrect connection string settings or access control settings. It is recommended to review the connection strings and access control settings, as well as check the network security group rules if the app is accessing Azure resources. Additionally, it is suggested to check the service connectors and web app networking settings to identify and resolve the issue.


```shell
export RESOURCE_GROUP="PLACEHOLDER"
export APP_NAME="PLACEHOLDER"
export CONNECTION_NAME="PLACEHOLDER"
export NSG_NAME="PLACEHOLDER"
export NSG_RULE_NAME="PLACEHOLDER"
export SERVER_NAME="PLACEHOLDER"
export DATABASE_NAME="PLACEHOLDER"
export SECRET="PLACEHOLDER"
```


### Check the web app's connection strings

```shell
az webapp config connection-string list -g ${RESOURCE_GROUP} -n ${APP_NAME}
```

### Check the web app's access control settings

```shell
az webapp identity show -g ${RESOURCE_GROUP} -n ${APP_NAME}
```

### List web app connection

```shell
az webapp connection list -g ${RESOURCE_GROUP} -n ${APP_NAME}
```

### List web app's connection source configuration

```shell
az webapp connection list-configuration -g ${RESOURCE_GROUP} -n ${APP_NAME} --connection ${CONNECTION_NAME}
```

### Check web app networking settings

```shell
az webapp show -g ${RESOURCE_GROUP} -n ${APP_NAME} --query outboundIpAddresses
```

### List the network security group

```shell
az network nsg rule list --nsg-name ${NSG_NAME} --resource-group ${RESOURCE_GROUP}
```

### Check network security group rules

```shell
az network nsg rule show --resource-group ${RESOURCE_GROUP_NAME} --nsg-name ${NSG_NAME} --name ${NSG_RULE_NAME}
```


### Create connection between webapp and database.

```shell
#!/bin/bash

# Set variables
RESOURCE_GROUP=${RESOURCE_GROUP_NAME}
APP_NAME=${WEB_APP_NAME}
SERVER_NAME=${SERVER_NAME}
DATABASE_NAME=${DATABASE_NAME}
SECRET=${SECRET}


# Get a list of supported target services for App Service.
az webapp connection list-support-types -o table

# Create the connecction between webapp and SQL

az webapp connection create sql -g $RESOURCE_GROUP -n $APP_NAME --tg $RESOURCE_GROUP --server $SERVER_NAME --database $DATABASE_NAME --secret $SECRET
```


Azure Web App Resource Access and Permissions Issue

Overview

Parameters

Debug

Check the web app's connection strings

Check the web app's access control settings

List web app connection

List web app's connection source configuration

Check web app networking settings

List the network security group

Check network security group rules

Repair

Create connection between webapp and database.

Learn more

Related Runbooks

Support