What you need to know
Application Gateway's App Services dropdown has a narrower scope than backend configuration.
Potentially affected
Use this configuration check when the intended App Service belongs to a different subscription from Application Gateway. Confirm the backend's identity and intended public or private access path with its owner before entering an address.
DSE recommendation
DSE recommends treating an absent dropdown entry as a scope clue, then using the documented target type for the intended app.
Source facts
Application Gateway’s App Services target dropdown lists only apps in the gateway’s subscription. Microsoft directs administrators targeting an app in another subscription to choose IP address or hostname and enter the App Service hostname. For an App Service using private endpoints, the guide directs them to use the private endpoint’s FQDN or IP address. Microsoft Learn.
Applicability
Use this configuration check when the intended App Service belongs to a different subscription from Application Gateway. Confirm the backend’s identity and intended public or private access path with its owner before entering an address.
DSE recommendation
DSE recommends treating an absent dropdown entry as a scope clue, then using the documented target type for the intended app. Obtain the exact hostname or private-endpoint address from the backend owner. Review name resolution, access restrictions, HTTP settings and the health probe together before saving the configuration.
Verification
Inspect the saved backend address and test resolution from the intended gateway network. Check backend health, then exercise the application through the approved listener. Retain the subscription and resource identities with the observed result. A correctly entered hostname is one configuration checkpoint; acceptance also requires the intended application path to work.
Official references
Review the official source
Manage traffic to App Service - Azure Application Gateway | Microsoft Learn · Verified September 17, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE