{"id":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","shortId":"QDWu7U","kind":"skill","title":"azure-virtual-network-manager","tagline":"Expert knowledge for Azure Virtual Network Manager development including troubleshooting, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing AVNM IPAM pools, network groups, cross-tenant connectivity, security admin rules, or ARG queri","description":"# Azure Virtual Network Manager Skill\n\nThis skill provides expert guidance for Azure Virtual Network Manager. Covers troubleshooting, limits & quotas, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L33-L38 | Diagnosing and fixing common Azure Virtual Network Manager issues, including deployment/configuration failures and verifying that AVNM-applied network configurations work as intended. |\n| Limits & Quotas | L39-L43 | IPAM features, supported regions, and key Azure Virtual Network Manager limits (scale, resources, configurations) that affect design and deployment decisions. |\n| Security | L44-L54 | Configuring and applying Azure Virtual Network Manager security admin rules to block or protect traffic (incl. high‑risk ports) using network groups, portal, and PowerShell. |\n| Configuration | L55-L68 | Configuring AVNM: IPAM pools, network groups (static/dynamic via Policy), cross-tenant connections, event logs, and managing UDRs/topologies and reachability analysis. |\n| Integrations & Coding Patterns | L69-L72 | Using Azure Resource Graph to query, filter, and report on Azure Virtual Network Manager resources, configurations, and deployments at scale across subscriptions |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Troubleshoot common Azure Virtual Network Manager issues | https://learn.microsoft.com/en-us/azure/virtual-network-manager/common-issues |\n| Verify and troubleshoot AVNM-applied configurations | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-view-applied-configurations |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Understand Azure Virtual Network Manager limitations | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-limitations |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Enforce virtual network security with AVNM admin rules | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-enforcement |\n| Apply AVNM security admin rules using network groups | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admin-rules-network-group |\n| Use security admin rules in Azure Virtual Network Manager | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins |\n| Protect high-risk ports using AVNM security admin rules | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-high-risk-ports |\n| Block network traffic with AVNM security admin rules (portal) | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-portal |\n| Block outbound traffic with AVNM security rules (PowerShell) | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-powershell |\n| Create AVNM security admin rules using network groups | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-security-admin-rule-network-group |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Automate VNet IP address management with AVNM IPAM pools | https://learn.microsoft.com/en-us/azure/virtual-network-manager/automate-ip-address-management-ipam-sample |\n| Configure AVNM network groups with Azure Policy | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-azure-policy-integration |\n| Deploy Azure Virtual Network Manager IPAM pools with Bicep | https://learn.microsoft.com/en-us/azure/virtual-network-manager/deploy-ip-address-management-pools-bicep |\n| Configure AVNM cross-tenant connections using CLI | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-cli |\n| Configure cross-tenant connections in AVNM via portal | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-portal |\n| Configure Azure Virtual Network Manager event logs and destinations | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-event-logs |\n| Configure user-defined routes with Azure Virtual Network Manager | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-user-defined-route |\n| Define dynamic AVNM network groups using Azure Policy | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-define-network-group-membership-azure-policy |\n| Manage UDRs across multiple AVNM hub-and-spoke topologies | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-manage-user-defined-routes-multiple-hub-spoke-topologies |\n| Use Virtual Network Verifier to analyze VM reachability in AVNM | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-verify-reachability-with-virtual-network-verifier |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Query Azure Virtual Network Manager with Azure Resource Graph | https://learn.microsoft.com/en-us/azure/virtual-network-manager/query-azure-resource-graph |","tags":["azure","virtual","network","manager","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding"],"capabilities":["skill","source-microsoftdocs","skill-azure-virtual-network-manager","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-virtual-network-manager","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.700","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 549 github stars · SKILL.md body (6,043 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T18:54:00.836Z","embedding":null,"createdAt":"2026-04-18T22:00:24.569Z","updatedAt":"2026-05-18T18:54:00.836Z","lastSeenAt":"2026-05-18T18:54:00.836Z","tsv":"'/en-us/azure/virtual-network-manager/automate-ip-address-management-ipam-sample':482 '/en-us/azure/virtual-network-manager/common-issues':360 '/en-us/azure/virtual-network-manager/concept-azure-policy-integration':492 '/en-us/azure/virtual-network-manager/concept-enforcement':397 '/en-us/azure/virtual-network-manager/concept-limitations':383 '/en-us/azure/virtual-network-manager/concept-security-admin-rules-network-group':408 '/en-us/azure/virtual-network-manager/concept-security-admins':420 '/en-us/azure/virtual-network-manager/deploy-ip-address-management-pools-bicep':504 '/en-us/azure/virtual-network-manager/how-to-block-high-risk-ports':433 '/en-us/azure/virtual-network-manager/how-to-block-network-traffic-portal':445 '/en-us/azure/virtual-network-manager/how-to-block-network-traffic-powershell':456 '/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-cli':515 '/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-portal':527 '/en-us/azure/virtual-network-manager/how-to-configure-event-logs':539 '/en-us/azure/virtual-network-manager/how-to-create-security-admin-rule-network-group':467 '/en-us/azure/virtual-network-manager/how-to-create-user-defined-route':552 '/en-us/azure/virtual-network-manager/how-to-define-network-group-membership-azure-policy':563 '/en-us/azure/virtual-network-manager/how-to-manage-user-defined-routes-multiple-hub-spoke-topologies':576 '/en-us/azure/virtual-network-manager/how-to-verify-reachability-with-virtual-network-verifier':589 '/en-us/azure/virtual-network-manager/how-to-view-applied-configurations':370 '/en-us/azure/virtual-network-manager/query-azure-resource-graph':606 '/microsoftdocs/mcp/blob/main/readme.md)':166 '3':137 'accept':205 'access':171 'across':346,566 'address':474 'admin':37,278,393,401,411,429,440,460 'affect':261 'agent':86,130,189,203 'analysi':319 'analyz':582 'appli':235,272,366,398 'arg':40 'autom':471 'avail':156 'avnm':27,234,300,365,392,399,427,438,450,458,477,484,506,522,555,568,586 'avnm-appli':233,364 'azur':2,9,42,53,222,252,273,327,336,353,376,414,488,494,529,546,559,596,601 'azure-virtual-network-manag':1 'bicep':501 'block':281,434,446 'capabl':78 'categori':89,97,113,209,211 'cli':512 'code':22,65,321,591 'combin':68 'common':221,352 'configur':19,62,237,259,270,295,299,341,367,468,483,505,516,528,540 'connect':35,311,510,520 'content':73,175 'cover':57 'creat':457 'cross':33,309,508,518 'cross-ten':32,308,507,517 'decis':265 'defin':543,553 'deploy':264,343,493 'deployment/configuration':228 'descript':213 'design':262 'destin':536 'develop':13 'diagnos':218 'doc':181 'document':76,174 'dynam':554 'e.g':101,117 'enforc':387 'event':312,533 'expert':6,50 'failur':229 'fallback':193 'featur':247 'fetch':77,173,182,195 'file':107,115,122,127 'filter':332 'fix':220 'github.com':165 'github.com/microsoftdocs/mcp/blob/main/readme.md)':164 'graph':329,603 'group':31,291,304,405,464,486,557 'guid':163 'guidanc':51 'high':286,423 'high-risk':422 'hub':570 'hub-and-spok':569 'import':84,128 'incl':285 'includ':14,227 'index':90,210 'instal':160,162 'integr':21,64,320,590 'intend':240 'ip':473 'ipam':28,246,301,478,498 'issu':226,357 'key':251 'knowledg':7 'l120':104 'l33':216 'l33-l38':215 'l35':103 'l35-l120':102 'l38':217 'l39':244 'l39-l43':243 'l43':245 'l44':268 'l44-l54':267 'l54':269 'l55':297 'l55-l68':296 'l68':298 'l69':324 'l69-l72':323 'l72':325 'latest':145 'learn':188,202 'learn-agent-skil':187,201 'learn.microsoft.com':359,369,382,396,407,419,432,444,455,466,481,491,503,514,526,538,551,562,575,588,605 'learn.microsoft.com/en-us/azure/virtual-network-manager/automate-ip-address-management-ipam-sample':480 'learn.microsoft.com/en-us/azure/virtual-network-manager/common-issues':358 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-azure-policy-integration':490 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-enforcement':395 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-limitations':381 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admin-rules-network-group':406 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins':418 'learn.microsoft.com/en-us/azure/virtual-network-manager/deploy-ip-address-management-pools-bicep':502 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-high-risk-ports':431 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-portal':443 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-powershell':454 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-cli':513 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-portal':525 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-event-logs':537 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-security-admin-rule-network-group':465 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-user-defined-route':550 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-define-network-group-membership-azure-policy':561 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-manage-user-defined-routes-multiple-hub-spoke-topologies':574 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-verify-reachability-with-virtual-network-verifier':587 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-view-applied-configurations':368 'learn.microsoft.com/en-us/azure/virtual-network-manager/query-azure-resource-graph':604 'limit':16,59,241,256,371,380 'line':99,111,212 'link':116,125 'local':69 'locat':93 'log':313,534 'manag':5,12,26,45,56,225,255,276,315,339,356,379,417,475,497,532,549,564,599 'markdown':192,208 'mcp':151,178 'metadata.generated':132 'microsoft':180 'microsoftdoc':152,179 'month':138 'multipl':567 'network':4,11,30,44,55,170,224,236,254,275,290,303,338,355,378,389,404,416,435,463,485,496,531,548,556,579,598 'old':139 'outbound':447 'pattern':23,66,322,592 'polici':307,489,560 'pool':29,302,479,499 'port':288,425 'portal':292,442,524 'powershel':294,453 'prefer':176 'protect':283,421 'provid':49 'pull':143 'queri':41,184,198,331,595 'quick':71 'quick-refer':70 'quota':17,60,242,372 'rang':100 'reachabl':318,584 'read':106,121 'refer':72,126 'region':249 'relev':94 'remot':75 'report':334 'repositori':149 'requir':169 'resourc':258,328,340,602 'return':191,207 'risk':287,424 'rout':544 'rule':38,279,394,402,412,430,441,452,461 'scale':257,345 'section':95 'secur':18,36,61,266,277,384,390,400,410,428,439,451,459 'security.md':118,119 'skill':46,48,83,168,190,204 'skill-azure-virtual-network-manager' 'source-microsoftdocs' 'specifi':110 'spoke':572 'static/dynamic':305 'string':185,199 'subscript':347 'suggest':140,157 'support':248 'tenant':34,310,509,519 'text/markdown':206 'tool':153 'topic':349,373,385,469,593 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'topolog':573 'traffic':284,436,448 'troubleshoot':15,58,214,348,351,363 'udr':565 'udrs/topologies':316 'understand':375 'url':350,374,386,470,594 'use':24,81,87,105,120,177,194,289,326,403,409,426,462,511,558,577 'user':142,159,542 'user-defin':541 'verifi':231,361,580 'version':146 'via':306,523 'virtual':3,10,43,54,223,253,274,337,354,377,388,415,495,530,547,578,597 'vm':583 'vnet':472 'webpag':196 'work':238","prices":[{"id":"3a6170c5-3497-43ca-ae68-244c149502c8","listingId":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T22:00:24.569Z"}],"sources":[{"listingId":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-virtual-network-manager","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-virtual-network-manager","isPrimary":false,"firstSeenAt":"2026-04-18T22:00:24.569Z","lastSeenAt":"2026-05-18T18:54:00.836Z"}],"details":{"listingId":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-virtual-network-manager","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":549,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-05-17T02:50:05Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"3f4d1c1db7b8067ee88faf970593371885a26e30","skill_md_path":"skills/azure-virtual-network-manager/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-virtual-network-manager"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-virtual-network-manager","description":"Expert knowledge for Azure Virtual Network Manager development including troubleshooting, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing AVNM IPAM pools, network groups, cross-tenant connectivity, security admin rules, or ARG queries, and other Azure Virtual Network Manager related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual WAN (use azure-virtual-wan), Azure Network Watcher (use azure-network-watcher), Azure Networking (use azure-networking).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-virtual-network-manager"},"updatedAt":"2026-05-18T18:54:00.836Z"}}