Skip to content

Cannot disable soft delete for Azure site recovery vault in CLI version 2.75~2.78 #32383

@Abbott-fu

Description

@Abbott-fu

Describe the bug

We cannot disable soft delete for Azure site recovery vault in CLI version 2.75~2.78. But we can disable soft delete for Azure Site Recovery vault in CLI 2.73
We suppose there is a bug in 2.75 - 2.78.

We use the same vault for test. Vault Name is asrtest.

Image

Related command

az backup vault backup-properties set --name --resource-group --soft-delete-feature-state Disable

Errors

Image

cli.azure.cli.core.azclierror: (BMSUserErrorDisablingSoftDeleteStateNotAllowed) Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
Code: BMSUserErrorDisablingSoftDeleteStateNotAllowed
Message: Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
az_command_data_logger: (BMSUserErrorDisablingSoftDeleteStateNotAllowed) Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
Code: BMSUserErrorDisablingSoftDeleteStateNotAllowed
Message: Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.

Issue script & Debug output

az backup vault backup-properties set --name asrtest --resource-group asrtest --soft-delete-feature-state Disable --debug
cli.knack.cli: Command arguments: ['backup', 'vault', 'backup-properties', 'set', '--name', 'asrtest', '--resource-group', 'asrtest', '--soft-delete-feature-state', 'Disable', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
Enable VT mode.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x00000283EC6B45E0>, <function OutputProducer.on_global_arguments at 0x00000283ECC419E0>, <function CLIQuery.on_global_arguments at 0x00000283ECC9F920>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'backup': ['azure.cli.command_modules.backup']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: backup 0.009 16 61
cli.azure.cli.core: Total (1) 0.009 16 61
cli.azure.cli.core: Loaded 16 groups, 61 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : backup vault backup-properties set
cli.azure.cli.core: Command table: backup vault backup-properties set
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x00000283EF3811C0>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\cao.yipeng.azure\commands\2025-11-05.15-01-20.backup_vault_backup-properties_set.23728.log'.
az_command_data_logger: command args: backup vault backup-properties set --name {} --resource-group {} --soft-delete-feature-state {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x00000283EF3BE700>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x00000283EF3E8A40>, <function register_cache_arguments..add_cache_arguments at 0x00000283EF3E8C20>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x00000283EF3E8CC0>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x00000283ECC41A80>, <function CLIQuery.handle_query_parameter at 0x00000283ECC9F9C0>, <function register_ids_argument..parse_ids_arguments at 0x00000283EF3E8AE0>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=RecoveryServicesBackupClient
cli.azure.cli.core.auth.persistence: build_persistence: location='C:\Users\cao.yipeng\.azure\msal_token_cache.bin', encrypt=True
cli.azure.cli.core.auth.binary_cache: load: C:\Users\cao.yipeng.azure\msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b
msal.authority: openid_config("https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'code_challenge_methods_supported': ['plain', 'S256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.partner.microsoftonline.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://microsoftgraph.chinacloudapi.cn/oidc/userinfo', 'authorization_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/kerberos', 'tenant_region_scope': 'AS', 'cloud_instance_name': 'partner.microsoftonline.cn', 'cloud_graph_host_name': 'graph.chinacloudapi.cn', 'msgraph_host': 'microsoftgraph.chinacloudapi.cn', 'rbac_url': 'https://pas.chinacloudapi.cn'}
msal.application: Broker enabled? True
cli.azure.cli.command_modules.backup.custom: --backup-storage-redundancy, --cross-region-restore-flag, --classic-alerts and --azure-monitor-alerts-for-job-failures parameters will be ignored if provided.
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=RecoveryServicesBackupClient
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b
msal.authority: openid_config("https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'code_challenge_methods_supported': ['plain', 'S256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.partner.microsoftonline.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://microsoftgraph.chinacloudapi.cn/oidc/userinfo', 'authorization_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/kerberos', 'tenant_region_scope': 'AS', 'cloud_instance_name': 'partner.microsoftonline.cn', 'cloud_graph_host_name': 'graph.chinacloudapi.cn', 'msgraph_host': 'microsoftgraph.chinacloudapi.cn', 'rbac_url': 'https://pas.chinacloudapi.cn'}
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.chinacloudapi.cn//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.chinacloudapi.cn//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 379f280c-fa8a-4a27-97c9-c52ff634a2bc
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.chinacloudapi.cn/subscriptions/fe456b35-63d2-4b94-a30a-cf03b5433907/resourceGroups/asrtest/providers/Microsoft.RecoveryServices/vaults/asrtest/backupconfig/vaultconfig?api-version=2025-02-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3b69f1af-ba15-11f0-9733-70b5e87265cf'
cli.azure.cli.core.sdk.policies: 'CommandName': 'backup vault backup-properties set'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --resource-group --soft-delete-feature-state --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.78.0 (MSI) azsdk-python-core/1.35.0 Python/3.13.7 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.chinacloudapi.cn:443
urllib3.connectionpool: https://management.chinacloudapi.cn:443 "GET /subscriptions/fe456b35-63d2-4b94-a30a-cf03b5433907/resourceGroups/asrtest/providers/Microsoft.RecoveryServices/vaults/asrtest/backupconfig/vaultconfig?api-version=2025-02-01 HTTP/1.1" 200 399
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '399'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '2a4297e6-351b-44bf-a72b-e584fe6aeebc'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3b69f1af-ba15-11f0-9733-70b5e87265cf'
cli.azure.cli.core.sdk.policies: 'Server': 'Kestrel'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': 'tenantId=b388b808-0ec9-4a09-a414-a7cbbd8b7e9b,objectId=f7cf74bb-023b-426f-a4d9-814fe3069d40/chinanorth2/d45fde4a-7006-4b89-9194-77b1b96e9f4f'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-resource-requests': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '2a4297e6-351b-44bf-a72b-e584fe6aeebc'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'CHINANORTH2:20251105T070121Z:2a4297e6-351b-44bf-a72b-e584fe6aeebc'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'Date': 'Wed, 05 Nov 2025 07:01:21 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"id":"/subscriptions/fe456b35-63d2-4b94-a30a-cf03b5433907/resourceGroups/asrtest/providers/Microsoft.RecoveryServices/vaults/asrtest/backupconfig/vaultconfig","name":"vaultconfig","type":"Microsoft.RecoveryServices/vaults/backupconfig","properties":{"enhancedSecurityState":"Disabled","softDeleteFeatureState":"Enabled","softDeleteRetentionPeriodInDays":14,"isSoftDeleteFeatureStateEditable":true}}
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=RecoveryServicesBackupClient
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b
msal.authority: openid_config("https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'code_challenge_methods_supported': ['plain', 'S256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.partner.microsoftonline.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://microsoftgraph.chinacloudapi.cn/oidc/userinfo', 'authorization_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.chinacloudapi.cn/b388b808-0ec9-4a09-a414-a7cbbd8b7e9b/kerberos', 'tenant_region_scope': 'AS', 'cloud_instance_name': 'partner.microsoftonline.cn', 'cloud_graph_host_name': 'graph.chinacloudapi.cn', 'msgraph_host': 'microsoftgraph.chinacloudapi.cn', 'rbac_url': 'https://pas.chinacloudapi.cn'}
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.chinacloudapi.cn//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.chinacloudapi.cn//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 35db4ca4-e909-4300-85c9-89f47a69a9c6
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.chinacloudapi.cn/subscriptions/fe456b35-63d2-4b94-a30a-cf03b5433907/resourceGroups/asrtest/providers/Microsoft.RecoveryServices/vaults/asrtest/backupResourceGuardProxies?api-version=2025-02-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3b69f1af-ba15-11f0-9733-70b5e87265cf'
cli.azure.cli.core.sdk.policies: 'CommandName': 'backup vault backup-properties set'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --resource-group --soft-delete-feature-state --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.78.0 (MSI) azsdk-python-core/1.35.0 Python/3.13.7 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': '
'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.chinacloudapi.cn:443
urllib3.connectionpool: https://management.chinacloudapi.cn:443 "GET /subscriptions/fe456b35-63d2-4b94-a30a-cf03b5433907/resourceGroups/asrtest/providers/Microsoft.RecoveryServices/vaults/asrtest/backupResourceGuardProxies?api-version=2025-02-01 HTTP/1.1" 200 12
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '12'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'c29b9a3f-9294-4367-80a9-a9feac912e71'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3b69f1af-ba15-11f0-9733-70b5e87265cf'
cli.azure.cli.core.sdk.policies: 'Server': 'Kestrel'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': 'tenantId=b388b808-0ec9-4a09-a414-a7cbbd8b7e9b,objectId=f7cf74bb-023b-426f-a4d9-814fe3069d40/chinanorth2/8c068cfa-4671-4352-a3a1-a0e4533b294b'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'c29b9a3f-9294-4367-80a9-a9feac912e71'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'CHINANORTH2:20251105T070121Z:c29b9a3f-9294-4367-80a9-a9feac912e71'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'Date': 'Wed, 05 Nov 2025 07:01:20 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"value":[]}
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.chinacloudapi.cn/subscriptions/fe456b35-63d2-4b94-a30a-cf03b5433907/resourceGroups/asrtest/providers/Microsoft.RecoveryServices/vaults/asrtest/backupconfig/vaultconfig?api-version=2025-02-01'
cli.azure.cli.core.sdk.policies: Request method: 'PATCH'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '130'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3b69f1af-ba15-11f0-9733-70b5e87265cf'
cli.azure.cli.core.sdk.policies: 'CommandName': 'backup vault backup-properties set'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --resource-group --soft-delete-feature-state --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.78.0 (MSI) azsdk-python-core/1.35.0 Python/3.13.7 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"properties": {"enhancedSecurityState": "Disabled", "softDeleteFeatureState": "Disabled", "softDeleteRetentionPeriodInDays": 14}}
urllib3.connectionpool: https://management.chinacloudapi.cn:443 "PATCH /subscriptions/fe456b35-63d2-4b94-a30a-cf03b5433907/resourceGroups/asrtest/providers/Microsoft.RecoveryServices/vaults/asrtest/backupconfig/vaultconfig?api-version=2025-02-01 HTTP/1.1" 400 217
cli.azure.cli.core.sdk.policies: Response status: 400
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '217'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': 'tenantId=b388b808-0ec9-4a09-a414-a7cbbd8b7e9b,objectId=f7cf74bb-023b-426f-a4d9-814fe3069d40/chinanorth2/6d070d24-1b28-4486-be0f-439f1fb2ccd0'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '65b41ccf-01f7-49db-a23d-5fea7b3ed0fb'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3b69f1af-ba15-11f0-9733-70b5e87265cf'
cli.azure.cli.core.sdk.policies: 'Server': 'Kestrel'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '65b41ccf-01f7-49db-a23d-5fea7b3ed0fb'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'CHINANORTH2:20251105T070121Z:65b41ccf-01f7-49db-a23d-5fea7b3ed0fb'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'Date': 'Wed, 05 Nov 2025 07:01:21 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"BMSUserErrorDisablingSoftDeleteStateNotAllowed","message":"Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected."}}
cli.azure.cli.core.azclierror: Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 703, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 336, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/backup/custom.py", line 703, in set_backup_properties
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/tracing/decorator.py", line 119, in wrapper_use_tracer
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/mgmt/recoveryservicesbackup/activestamp/operations/_backup_resource_vault_configs_operations.py", line 367, in update
azure.core.exceptions.HttpResponseError: (BMSUserErrorDisablingSoftDeleteStateNotAllowed) Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
Code: BMSUserErrorDisablingSoftDeleteStateNotAllowed
Message: Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 666, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 734, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 726, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/backup/_exception_handler.py", line 10, in backup_exception_handler
azure.core.exceptions.HttpResponseError: (BMSUserErrorDisablingSoftDeleteStateNotAllowed) Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
Code: BMSUserErrorDisablingSoftDeleteStateNotAllowed
Message: Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.

cli.azure.cli.core.azclierror: (BMSUserErrorDisablingSoftDeleteStateNotAllowed) Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
Code: BMSUserErrorDisablingSoftDeleteStateNotAllowed
Message: Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
az_command_data_logger: (BMSUserErrorDisablingSoftDeleteStateNotAllowed) Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
Code: BMSUserErrorDisablingSoftDeleteStateNotAllowed
Message: Disabling soft delete or enhanced security state is not allowed for this vault. Please contact Microsoft Support if this is not expected.
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x00000283EF381440>]
az_command_data_logger: exit code: 1
cli.main: Command ran in 2.149 seconds (init: 0.371, invoke: 1.779)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 4311 in cache file under C:\Users\cao.yipeng.azure\telemetry\20251105150122107
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry_init_.pyc C:\Users\cao.yipeng.azure C:\Users\cao.yipeng.azure\telemetry\20251105150122107"
telemetry.process: Return from creating process 48584
telemetry.main: Finish creating telemetry upload process.

Expected behavior

from debug info, we see CLi 2.73 is using Azure API api-version=2024-04-01, But CLI 2.78 uses Azure API api-version=2025-02-01. We do not know if there is a change in Azure API or a bug in CLI 2.78. If there is bug, please help fix it .

Environment Summary

CLI version 2.78

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Auto-AssignAuto assign by botRecovery Services Backupaz backupService AttentionThis issue is responsible by Azure service team.bugThis issue requires a change to an existing behavior in the product in order to be resolved.customer-reportedIssues that are reported by GitHub users external to the Azure organization.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions