Use a hostname when an App Service backend is in another subscription

Application Gateway's App Services dropdown has a narrower scope than backend configuration.

Resilient network core with engineered blue and gold data paths.
DSE visual intelligenceNetworks & infrastructureGuide · 1 min read
Executive summary

What you need to know

Application Gateway's App Services dropdown has a narrower scope than backend configuration.

Potentially affected

Use this configuration check when the intended App Service belongs to a different subscription from Application Gateway. Confirm the backend's identity and intended public or private access path with its owner before entering an address.

DSE recommendation

DSE recommends treating an absent dropdown entry as a scope clue, then using the documented target type for the intended app.

Source facts

Application Gateway’s App Services target dropdown lists only apps in the gateway’s subscription. Microsoft directs administrators targeting an app in another subscription to choose IP address or hostname and enter the App Service hostname. For an App Service using private endpoints, the guide directs them to use the private endpoint’s FQDN or IP address. Microsoft Learn.

Applicability

Use this configuration check when the intended App Service belongs to a different subscription from Application Gateway. Confirm the backend’s identity and intended public or private access path with its owner before entering an address.

DSE recommendation

DSE recommends treating an absent dropdown entry as a scope clue, then using the documented target type for the intended app. Obtain the exact hostname or private-endpoint address from the backend owner. Review name resolution, access restrictions, HTTP settings and the health probe together before saving the configuration.

Verification

Inspect the saved backend address and test resolution from the intended gateway network. Check backend health, then exercise the application through the approved listener. Retain the subscription and resource identities with the observed result. A correctly entered hostname is one configuration checkpoint; acceptance also requires the intended application path to work.

Official references

Microsoft Learn: Manage traffic to App Service.

Primary reference

Review the official source

Manage traffic to App Service - Azure Application Gateway | Microsoft Learn · Verified September 17, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE