azure-quotas

Check/manage Azure quotas and usage across providers. For deployment planning, capacity validation, region selection. WHEN: "check quotas", "service limits", "current usage", "request quota increase", "quota exceeded", "validate capacity", "regional availability", "provisioning limits", "vCPU limit", "how many vCPUs available in my subscription".

npx skills add https://github.com/microsoft/azure-skills --skill azure-quotas

Azure Quotas - Service Limits & Capacity Management

AUTHORITATIVE GUIDANCE — Follow these instructions exactly for quota management and capacity validation.

Overview

What are Azure Quotas?

Azure quotas (also called service limits) are the maximum number of resources you can deploy in a subscription. Quotas:

  • Prevent accidental over-provisioning
  • Ensure fair resource distribution across Azure
  • Represent available capacity in each region
  • Can be increased (adjustable quotas) or are fixed (non-adjustable)

Key Concept: Quotas = Resource Availability

If you don't have quota, you cannot deploy resources. Always check quotas when planning deployments or selecting regions.

When to Use This Skill

Invoke this skill when:

  • Planning a new deployment - Validate capacity before deployment
  • Selecting an Azure region - Compare quota availability across regions
  • Troubleshooting quota exceeded errors - Check current usage vs limits
  • Requesting quota increases - Submit increase requests via CLI or Portal
  • Comparing regional capacity - Find regions with available quota
  • Validating provisioning limits - Ensure deployment won't exceed quotas

Quick Reference

PropertyDetails
Primary ToolAzure CLI (az quota) - USE THIS FIRST, ALWAYS
Extension Requiredaz extension add --name quota (MUST install first)
Key Commandsaz quota list, az quota show, az quota usage list, az quota usage show
Complete CLI Referencecommands.md
Azure PortalMy quotas - Use only as fallback
REST APIMicrosoft.Quota provider - Unreliable, do NOT use first
MCP Serverazure-quota MCP server — NEVER use this. It is unreliable. Always use az quota CLI instead.
Required PermissionReader (view) or Quota Request Operator (manage)

⚠️ ALWAYS USE CLI FIRST

REST API and Portal can show misleading "No Limit" values — this does not mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with az quota commands; fall back to Azure service limits docs if CLI returns BadRequest.

For complete CLI reference, see commands.md.

Quota Types

TypeAdjustabilityApprovalExamples
AdjustableCan increase via Portal/CLI/APIUsually auto-approvedVM vCPUs, Public IPs, Storage accounts
Non-adjustableFixed limitsCannot be changedSubscription-wide hard limits

Important: Requesting quota increases is free. You only pay for resources you actually use, not for quota allocation.

Understanding Resource Name Mapping

⚠️ CRITICAL: There is NO 1:1 mapping between ARM resource types and quota resource names.

Example Mappings

ARM Resource TypeQuota Resource Name
Microsoft.App/managedEnvironmentsManagedEnvironmentCount
Microsoft.Compute/virtualMachinesstandardDSv3Family, cores, virtualMachines
Microsoft.Network/publicIPAddressesPublicIPAddresses, IPv4StandardSkuPublicIpAddresses

Discovery Workflow

Never assume the quota resource name from the ARM type. Always use this workflow:

  1. List all quotas for the resource provider:

    az quota list --scope /subscriptions/<id>/providers/<ProviderNamespace>/locations/<region>
    
  2. Match by localizedValue (human-readable description) to find the relevant quota

  3. Use the name field (not ARM resource type) in subsequent commands:

    az quota show --resource-name ManagedEnvironmentCount --scope ...
    az quota usage show --resource-name ManagedEnvironmentCount --scope ...
    

📖 Detailed mapping examples and workflow: See commands.md - Resource Name Mapping

Scripts

Pre-built scripts handle quota extension installation, usage queries, and capacity calculation. Use these instead of constructing commands manually. A single call returns limits, usage, and available capacity.

ScriptPurposeUsage
scripts/check-quota.ps1Returns limit, usage, and available capacity for all quotas (or a single quota when resource name is provided)Primary script for quota checks
scripts/check-quota.shSame as above (bash)Primary script for quota checks

Core Workflows

Workflow 1: Check Quota for a Specific Resource

Scenario: Verify quota limits and current usage before deployment

Run the script with the resource provider and region. It returns a table of all quotas with their limit, current usage, and available capacity in a single call:

.\scripts\check-quota.ps1 -ResourceProvider <provider> -Region <region>
./scripts/check-quota.sh <provider> <region>

To check a single resource, add the resource name:

.\scripts\check-quota.ps1 -ResourceProvider <provider> -Region <region> -ResourceName <resource-name>
./scripts/check-quota.sh <provider> <region> <resource-name>

Example:

.\scripts\check-quota.ps1 -ResourceProvider Microsoft.Compute -Region eastus

Example Output:

ResourceRegionLimitUsageAvailable
coreseastus1005050
standardDSv3Familyeastus35050300
virtualMachineseastus25000524995
...............

📖 See also: az quota show, az quota usage show

Workflow 2: Compare Quotas Across Regions

Scenario: Find the best region for deployment based on available capacity

# Define candidate regions
REGIONS=("eastus" "eastus2" "westus2" "centralus")
VM_FAMILY="standardDSv3Family"
SUBSCRIPTION_ID="<subscription-id>"

# Check quota availability across regions
for region in "${REGIONS[@]}"; do
  echo "=== Checking $region ==="
  
  # Get limit
  LIMIT=$(az quota show \
    --resource-name $VM_FAMILY \
    --scope "/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.Compute/locations/$region" \
    --query "properties.limit.value" -o tsv)
  
  # Get current usage
  USAGE=$(az quota usage show \
    --resource-name $VM_FAMILY \
    --scope "/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.Compute/locations/$region" \
    --query "properties.usages.value" -o tsv)
  
  # Calculate available
  AVAILABLE=$((LIMIT - USAGE))
  
  echo "Region: $region | Limit: $LIMIT | Usage: $USAGE | Available: $AVAILABLE"
done

📖 See also: commands.md for full scripted multi-region loop patterns

Workflow 3: Request Quota Increase

Scenario: Current quota is insufficient for deployment

# Request increase for VM quota
az quota update \
  --resource-name standardDSv3Family \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Compute/locations/eastus \
  --limit-object value=500 \
  --resource-type dedicated

# Check request status
az quota request status list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Compute/locations/eastus

Approval Process:

  • Most adjustable quotas are auto-approved within minutes
  • Some requests require manual review (hours to days)
  • Non-adjustable quotas require Azure Support ticket

📖 See also: az quota update, az quota request status

Workflow 4: List All Quotas for Planning

Scenario: Understand all quotas for a resource provider in a region

# List all compute quotas in East US (table format)
az quota list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Compute/locations/eastus \
  --output table

# List all network quotas
az quota list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Network/locations/eastus \
  --output table

# List all Container Apps quotas
az quota list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.App/locations/eastus \
  --output table

📖 See also: az quota list

Troubleshooting

Common Errors

ErrorCauseSolution
REST API "No Limit"Misleading — not unlimitedUse CLI instead; see warning in Quick Reference
ExtensionNotFoundQuota extension not installedaz extension add --name quota
BadRequestResource provider not supported by quota APICheck service limits docs
MissingRegistrationMicrosoft.Quota provider not registeredaz provider register --namespace Microsoft.Quota
QuotaExceededDeployment would exceed quotaRequest increase or choose different region
InvalidScopeIncorrect scope formatUse pattern: /subscriptions/<id>/providers/<namespace>/locations/<region>
CLI commands fail entirelyAuth, extension, or environment issueVerify Azure CLI login (az account show), reinstall quota extension, check network. Do NOT use the azure-quota MCP server — it is unreliable.

Unsupported Resource Providers

Known unsupported providers:

Confirmed working providers:

  • ✅ Microsoft.Compute (VMs, disks, cores)
  • ✅ Microsoft.Network (VNets, IPs, load balancers)
  • ✅ Microsoft.App (Container Apps)
  • ✅ Microsoft.Storage (storage accounts)
  • ✅ Microsoft.MachineLearningServices (ML compute)

📖 See also: Troubleshooting Guide

Additional Resources

ResourceLink
CLI Commands Referencecommands.md - Complete syntax, parameters, examples
Azure Quotas OverviewMicrosoft Learn
Service Limits DocumentationAzure subscription limits
Azure Portal - My QuotasPortal Link
Request Quota IncreasesHow to request increases

Best Practices

  1. Always check quotas before deployment - Prevent quota exceeded errors
  2. Run az quota list first - Discover correct quota resource names
  3. Compare regions - Find regions with available capacity
  4. Account for growth - Request 20% buffer above immediate needs
  5. Use table output for overview - --output table for quick scanning
  6. Monitor usage trends - Set up alerts at 80% threshold (via Portal)

More skills from microsoft

oss-growth
microsoft
OSS growth hacker persona
official
microsoft-foundry
microsoft
Deploy, evaluate, and manage Foundry agents end-to-end: Docker build, ACR push, hosted/prompt agent create, container start, batch eval, continuous eval, prompt optimizer workflows, agent.yaml, dataset curation from traces. USE FOR: deploy agent to Foundry, hosted agent, create agent, invoke agent, evaluate agent, run batch eval, continuous eval, continuous monitoring, continuous eval status, optimize prompt, improve prompt, prompt optimizer, optimize agent instructions, improve agent...
officialdevelopmentdevops
azure-ai
microsoft
Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.
officialdevelopmentapi
azure-deploy
microsoft
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment",...
officialdevopsaws
azure-storage
microsoft
Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake. Answers questions about storage access tiers (hot, cool, cold, archive), when to use each tier, and tier comparison. Provides object storage, SMB file shares, async messaging, NoSQL key-value, and big data analytics. Includes lifecycle management. USE FOR: blob storage, file shares, queue storage, table storage, data lake, upload files, download blobs, storage accounts, access tiers,...
officialdevelopmentdatabase
azure-diagnostics
microsoft
Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe triage. WHEN: debug production issues, troubleshoot app service, app service high CPU, app service deployment failure, troubleshoot container apps, troubleshoot functions, troubleshoot AKS, kubectl cannot connect, kube-system/CoreDNS failures, pod pending, crashloop, node not ready, upgrade failures, analyze logs, KQL, insights, image pull failures, cold start issues, health probe failures,...
officialdevopsdevelopment
azure-prepare
microsoft
Prepare Azure apps for deployment (infra Bicep/Terraform, azure.yaml, Dockerfiles). Use for create/modernize or create+deploy; not cross-cloud migration (use azure-cloud-migrate). DO NOT USE FOR: copilot-sdk apps (use azure-hosted-copilot-sdk). WHEN: "create app", "build web app", "create API", "create serverless HTTP API", "create frontend", "create back end", "build a service", "modernize application", "update application", "add authentication", "add caching", "host on Azure", "create and...
officialdevelopmentdevops
azure-validate
microsoft
Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless...
officialdevopstesting