Safe starting points
Common commands in az resource
Open a command briefing to review scope, risk, related concepts, and safer checks before copying anything.
az resource delete --ids <resource-id>
Delete or remove resource with the Azure CLI; verify scope and backup/rollback before running.
destructive · delete
az resource list --query "[?contains(type, 'Microsoft.Migrate')].{name:name,type:type,resourceGroup:resourceGroup}"
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[?identity.type!=null].{name:name,type:type,resourceGroup:resourceGroup,identity:identity.type,principalId:identity.principalId}" --output table
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[?tags.Owner==null].[name,type,resourceGroup,location]" --output table
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[?tags.Owner==null].[name,type,resourceGroup]" --output table
Find resources missing an Owner tag.
read-only · list
az resource list --query "[].{name:name,type:type,location:location,resourceGroup:resourceGroup,tags:tags}" --output table
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[].{name:name,type:type,location:location,resourceGroup:resourceGroup}" --output table
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[].{name:name,type:type,location:location,resourceGroup:resourceGroup}" -o table
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[].{name:name,type:type,location:location,zones:zones,resourceGroup:resourceGroup}" --output json
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[].{name:name,type:type,location:location}" --output table
List Azure resources in the active subscription.
read-only · list
az resource list --query "[].{name:name,type:type,resourceGroup:resourceGroup,location:location,tags:tags,id:id}" --output json
Inspect or list resource with the Azure CLI before making changes.
read-only · list
az resource list --query "[].{name:name,type:type,resourceGroup:resourceGroup,location:location,tags:tags}" --output json
Inspect or list resource with the Azure CLI before making changes.
read-only · list
Search an exact az command, choose a common task, or filter by service.
Show more commands
No commands matched.
Try a service or group such as az group , az storage , az webapp , az aks , or az role assignment .
Browse by Azure service
Management and Governance 37 commands Databases 12 commands Analytics 9 commands Integration 5 commands Migration 5 commands AI and Machine Learning 4 commands Storage 4 commands Compute 3 commands DevOps 3 commands Identity 3 commands Monitoring and Observability 3 commands Media 2 commands Security 2 commands Web 2 commands App and integration services 1 commands Developer Tools 1 commands Governance 1 commands Networking 1 commands Virtual Desktop Infrastructure 1 commands
Browse command groups
az cognitiveservices account 63 commands · AI and Machine Learning az cognitiveservices account deployment 34 commands · AI and Machine Learning az cognitiveservices account identity 2 commands · AI and Machine Learning az cognitiveservices account keys 20 commands · AI and Machine Learning az cognitiveservices account network-rule 9 commands · AI and Machine Learning az cognitiveservices account project 4 commands · AI and Machine Learning az cognitiveservices usage 1 commands · AI and Machine Learning az keyvault secret 13 commands · AI and Machine Learning az ml batch-deployment 4 commands · AI and Machine Learning az ml batch-endpoint 8 commands · AI and Machine Learning az ml component 6 commands · AI and Machine Learning az ml compute 14 commands · AI and Machine Learning az ml connection 1 commands · AI and Machine Learning az ml data 6 commands · AI and Machine Learning az ml datastore 3 commands · AI and Machine Learning az ml environment 7 commands · AI and Machine Learning az ml job 34 commands · AI and Machine Learning az ml model 13 commands · AI and Machine Learning az ml monitor 2 commands · AI and Machine Learning az ml online-deployment 18 commands · AI and Machine Learning az ml online-endpoint 23 commands · AI and Machine Learning az ml registry model 2 commands · AI and Machine Learning az ml schedule 2 commands · AI and Machine Learning az ml workspace 10 commands · AI and Machine Learning az ml workspace outbound-rule 1 commands · AI and Machine Learning az monitor diagnostic-settings 53 commands · AI and Machine Learning az network private-endpoint-connection 27 commands · AI and Machine Learning az rest 157 commands · AI and Machine Learning az search admin-key 3 commands · AI and Machine Learning az search query-key 7 commands · AI and Machine Learning az search service 20 commands · AI and Machine Learning az search service query-key 1 commands · AI and Machine Learning az search service shared-private-link-resource 1 commands · AI and Machine Learning az databricks access-connector 2 commands · Analytics az databricks workspace 17 commands · Analytics az databricks workspace vnet-peering 2 commands · Analytics
How to read an Azure CLI command
az <group> <subgroup> <operation> --parameter <value>
The group usually identifies the Azure service. The operation helps indicate whether the command reads, creates, changes, assigns, scales, or deletes Azure state.
Open a context check
Starter command flows
Resource group lifecycle
Start with read-only discovery, create only after context checks, then clean up deliberately.
read-only az account show --output tableread-only az group list --output tablemutating az group create --name <resource-group> --location <region>read-only az group show --name <resource-group>destructive az group delete --name <resource-group> --yes
Web app release operations
Move from App Service discovery through deployment, slot checks, diagnostics, and guarded rollback.
read-only az webapp list --resource-group <resource-group>mutating az webapp deployment slot create --name <app-name> --resource-group <resource-group> --slot <slot-name>mutating az webapp restart --name <app-name> --resource-group <resource-group>destructive az webapp delete --resource-group <rg> --name <app>
Storage hardening and access
Discover storage accounts, then check network, identity, lifecycle, container, and destructive cleanup commands.
read-only az storage account list --resource-group <resource-group>read-only az storage account show --name <storage-account> --resource-group <resource-group>mutating az storage account update --name <storage-account> --resource-group <resource-group>read-only az storage container list --account-name <storage-account>destructive az storage account delete --name <storage-account> --resource-group <resource-group>
Data Lake Storage Gen2
AKS operations path
Inspect AKS state, credentials, node pools, upgrades, monitoring, and destructive operations from one lane.
read-only az aks list --resource-group <resource-group>read-only az aks show --name <cluster-name> --resource-group <resource-group>security-impacting az aks get-credentials --name <cluster-name> --resource-group <resource-group>cost-impacting az aks nodepool add --cluster-name <cluster-name> --name <nodepool-name> --resource-group <resource-group>
Identity and access change path
Inspect identities and assignments before making privileged RBAC, managed identity, or credential changes.
read-only az role assignment list --assignee <principal-id> --all --output tablesecurity-impacting az role assignment create --assignee <principal-id> --role Reader --scope <scope>security-impacting az identity create --name <identity-name> --resource-group <resource-group>security-impacting az ad sp create --id <app-id>security-impacting az role assignment delete --assignee <principal-id> --role Reader --scope <scope>
Data platform lifecycle
Navigate database, analytics, messaging, and AI commands from discovery to controlled mutation.
read-only az sql db list --resource-group <rg> --server <server> --output tableread-only az cosmosdb show --name <account-name> --resource-group <resource-group>mutating az datafactory pipeline create --factory-name <factory-name> --resource-group <resource-group> --name <pipeline-name> --pipeline @pipeline.jsonmutating az eventhubs eventhub create --name <event-hub-name> --namespace-name <namespace-name> --resource-group <resource-group>cost-impacting az search service create --name <search-service> --resource-group <resource-group> --sku basic
Safety labels
Safety Read-only Inspects or lists Azure resources without intentionally changing them. Mutating Creates, updates, starts, stops, configures, or otherwise changes Azure resources. Cost-impacting Can allocate paid capacity, scale resources, change SKUs, enable services, or trigger usage charges. Security-impacting Changes identity, access, secrets, keys, credentials, network exposure, or other security-sensitive settings. Destructive Deletes, purges, removes, revokes, or clears resources, assignments, data, or configuration.
Operations Discover and inspect list, show, query Provision and deploy create, deploy, what-if, validate Configure and tune update, set, enable, disable, scale Secure and delegate assign, approve, regenerate-key, list-keys Operate and troubleshoot start, stop, restart, run, invoke, upload, download, sync, test Protect and recover backup, restore, export, import, migrate Remove and decommission delete, remove, purge, revoke, clear
Microsoft Learn is the official Azure CLI reference. Verify current syntax, extensions, parameters, and target scope before using a command in Azure.
