{"id":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","shortId":"QDWu7U","kind":"skill","title":"azure-virtual-network-manager","tagline":"Expert knowledge for Azure Virtual Network Manager development including troubleshooting, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing AVNM IPAM pools, network groups, cross-tenant connectivity, security admin rules, or ARG queri","description":"# Azure Virtual Network Manager Skill\n\nThis skill provides expert guidance for Azure Virtual Network Manager. Covers troubleshooting, limits & quotas, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L33-L38 | Diagnosing and fixing common Azure Virtual Network Manager issues, including deployment/configuration failures and verifying that AVNM-applied network configurations work as intended. |\n| Limits & Quotas | L39-L44 | IPAM features, supported regions, and key Azure Virtual Network Manager limits (scale, resources, configurations) that affect design and deployment decisions. |\n| Security | L45-L55 | Configuring and applying Azure Virtual Network Manager security admin rules to block or protect traffic (incl. high‑risk ports) using network groups, portal, and PowerShell. |\n| Configuration | L56-L69 | Configuring AVNM: IPAM pools, network groups (static/dynamic via Policy), cross-tenant connections, event logs, and managing UDRs/topologies and reachability analysis. |\n| Integrations & Coding Patterns | L70-L73 | Using Azure Resource Graph to query, filter, and report on Azure Virtual Network Manager resources, configurations, and deployments at scale across subscriptions |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Troubleshoot common Azure Virtual Network Manager issues | https://learn.microsoft.com/en-us/azure/virtual-network-manager/common-issues |\n| Verify and troubleshoot AVNM-applied configurations | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-view-applied-configurations |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Understand IPAM capabilities and regional availability in AVNM | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-ip-address-management |\n| Understand Azure Virtual Network Manager limitations | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-limitations |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Enforce virtual network security with AVNM admin rules | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-enforcement |\n| Apply AVNM security admin rules using network groups | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admin-rules-network-group |\n| Use security admin rules in Azure Virtual Network Manager | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins |\n| Protect high-risk ports using AVNM security admin rules | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-high-risk-ports |\n| Block network traffic with AVNM security admin rules (portal) | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-portal |\n| Block outbound traffic with AVNM security rules (PowerShell) | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-powershell |\n| Create AVNM security admin rules using network groups | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-security-admin-rule-network-group |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Automate VNet IP address management with AVNM IPAM pools | https://learn.microsoft.com/en-us/azure/virtual-network-manager/automate-ip-address-management-ipam-sample |\n| Configure AVNM network groups with Azure Policy | https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-azure-policy-integration |\n| Deploy Azure Virtual Network Manager IPAM pools with Bicep | https://learn.microsoft.com/en-us/azure/virtual-network-manager/deploy-ip-address-management-pools-bicep |\n| Configure AVNM cross-tenant connections using CLI | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-cli |\n| Configure cross-tenant connections in AVNM via portal | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-portal |\n| Configure Azure Virtual Network Manager event logs and destinations | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-event-logs |\n| Configure user-defined routes with Azure Virtual Network Manager | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-user-defined-route |\n| Define dynamic AVNM network groups using Azure Policy | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-define-network-group-membership-azure-policy |\n| Manage UDRs across multiple AVNM hub-and-spoke topologies | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-manage-user-defined-routes-multiple-hub-spoke-topologies |\n| Use Virtual Network Verifier to analyze VM reachability in AVNM | https://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-verify-reachability-with-virtual-network-verifier |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Query Azure Virtual Network Manager with Azure Resource Graph | https://learn.microsoft.com/en-us/azure/virtual-network-manager/query-azure-resource-graph |","tags":["azure","virtual","network","manager","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding"],"capabilities":["skill","source-microsoftdocs","skill-azure-virtual-network-manager","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-virtual-network-manager","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.698","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 497 github stars · SKILL.md body (6,206 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T00:53:39.356Z","embedding":null,"createdAt":"2026-04-18T22:00:24.569Z","updatedAt":"2026-04-22T00:53:39.356Z","lastSeenAt":"2026-04-22T00:53:39.356Z","tsv":"'/en-us/azure/virtual-network-manager/automate-ip-address-management-ipam-sample':493 '/en-us/azure/virtual-network-manager/common-issues':360 '/en-us/azure/virtual-network-manager/concept-azure-policy-integration':503 '/en-us/azure/virtual-network-manager/concept-enforcement':408 '/en-us/azure/virtual-network-manager/concept-ip-address-management':385 '/en-us/azure/virtual-network-manager/concept-limitations':394 '/en-us/azure/virtual-network-manager/concept-security-admin-rules-network-group':419 '/en-us/azure/virtual-network-manager/concept-security-admins':431 '/en-us/azure/virtual-network-manager/deploy-ip-address-management-pools-bicep':515 '/en-us/azure/virtual-network-manager/how-to-block-high-risk-ports':444 '/en-us/azure/virtual-network-manager/how-to-block-network-traffic-portal':456 '/en-us/azure/virtual-network-manager/how-to-block-network-traffic-powershell':467 '/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-cli':526 '/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-portal':538 '/en-us/azure/virtual-network-manager/how-to-configure-event-logs':550 '/en-us/azure/virtual-network-manager/how-to-create-security-admin-rule-network-group':478 '/en-us/azure/virtual-network-manager/how-to-create-user-defined-route':563 '/en-us/azure/virtual-network-manager/how-to-define-network-group-membership-azure-policy':574 '/en-us/azure/virtual-network-manager/how-to-manage-user-defined-routes-multiple-hub-spoke-topologies':587 '/en-us/azure/virtual-network-manager/how-to-verify-reachability-with-virtual-network-verifier':600 '/en-us/azure/virtual-network-manager/how-to-view-applied-configurations':370 '/en-us/azure/virtual-network-manager/query-azure-resource-graph':617 '/microsoftdocs/mcp/blob/main/readme.md)':166 '3':137 'accept':205 'access':171 'across':346,577 'address':485 'admin':37,278,404,412,422,440,451,471 'affect':261 'agent':86,130,189,203 'analysi':319 'analyz':593 'appli':235,272,366,409 'arg':40 'autom':482 'avail':156,380 'avnm':27,234,300,365,382,403,410,438,449,461,469,488,495,517,533,566,579,597 'avnm-appli':233,364 'azur':2,9,42,53,222,252,273,327,336,353,387,425,499,505,540,557,570,607,612 'azure-virtual-network-manag':1 'bicep':512 'block':281,445,457 'capabl':78,377 'categori':89,97,113,209,211 'cli':523 'code':22,65,321,602 'combin':68 'common':221,352 'configur':19,62,237,259,270,295,299,341,367,479,494,516,527,539,551 'connect':35,311,521,531 'content':73,175 'cover':57 'creat':468 'cross':33,309,519,529 'cross-ten':32,308,518,528 'decis':265 'defin':554,564 'deploy':264,343,504 'deployment/configuration':228 'descript':213 'design':262 'destin':547 'develop':13 'diagnos':218 'doc':181 'document':76,174 'dynam':565 'e.g':101,117 'enforc':398 'event':312,544 'expert':6,50 'failur':229 'fallback':193 'featur':247 'fetch':77,173,182,195 'file':107,115,122,127 'filter':332 'fix':220 'github.com':165 'github.com/microsoftdocs/mcp/blob/main/readme.md)':164 'graph':329,614 'group':31,291,304,416,475,497,568 'guid':163 'guidanc':51 'high':286,434 'high-risk':433 'hub':581 'hub-and-spok':580 'import':84,128 'incl':285 'includ':14,227 'index':90,210 'instal':160,162 'integr':21,64,320,601 'intend':240 'ip':484 'ipam':28,246,301,376,489,509 'issu':226,357 'key':251 'knowledg':7 'l120':104 'l33':216 'l33-l38':215 'l35':103 'l35-l120':102 'l38':217 'l39':244 'l39-l44':243 'l44':245 'l45':268 'l45-l55':267 'l55':269 'l56':297 'l56-l69':296 'l69':298 'l70':324 'l70-l73':323 'l73':325 'latest':145 'learn':188,202 'learn-agent-skil':187,201 'learn.microsoft.com':359,369,384,393,407,418,430,443,455,466,477,492,502,514,525,537,549,562,573,586,599,616 'learn.microsoft.com/en-us/azure/virtual-network-manager/automate-ip-address-management-ipam-sample':491 'learn.microsoft.com/en-us/azure/virtual-network-manager/common-issues':358 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-azure-policy-integration':501 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-enforcement':406 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-ip-address-management':383 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-limitations':392 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admin-rules-network-group':417 'learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins':429 'learn.microsoft.com/en-us/azure/virtual-network-manager/deploy-ip-address-management-pools-bicep':513 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-high-risk-ports':442 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-portal':454 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-powershell':465 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-cli':524 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-portal':536 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-event-logs':548 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-security-admin-rule-network-group':476 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-user-defined-route':561 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-define-network-group-membership-azure-policy':572 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-manage-user-defined-routes-multiple-hub-spoke-topologies':585 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-verify-reachability-with-virtual-network-verifier':598 'learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-view-applied-configurations':368 'learn.microsoft.com/en-us/azure/virtual-network-manager/query-azure-resource-graph':615 'limit':16,59,241,256,371,391 'line':99,111,212 'link':116,125 'local':69 'locat':93 'log':313,545 'manag':5,12,26,45,56,225,255,276,315,339,356,390,428,486,508,543,560,575,610 'markdown':192,208 'mcp':151,178 'metadata.generated':132 'microsoft':180 'microsoftdoc':152,179 'month':138 'multipl':578 'network':4,11,30,44,55,170,224,236,254,275,290,303,338,355,389,400,415,427,446,474,496,507,542,559,567,590,609 'old':139 'outbound':458 'pattern':23,66,322,603 'polici':307,500,571 'pool':29,302,490,510 'port':288,436 'portal':292,453,535 'powershel':294,464 'prefer':176 'protect':283,432 'provid':49 'pull':143 'queri':41,184,198,331,606 'quick':71 'quick-refer':70 'quota':17,60,242,372 'rang':100 'reachabl':318,595 'read':106,121 'refer':72,126 'region':249,379 'relev':94 'remot':75 'report':334 'repositori':149 'requir':169 'resourc':258,328,340,613 'return':191,207 'risk':287,435 'rout':555 'rule':38,279,405,413,423,441,452,463,472 'scale':257,345 'section':95 'secur':18,36,61,266,277,395,401,411,421,439,450,462,470 'security.md':118,119 'skill':46,48,83,168,190,204 'skill-azure-virtual-network-manager' 'source-microsoftdocs' 'specifi':110 'spoke':583 'static/dynamic':305 'string':185,199 'subscript':347 'suggest':140,157 'support':248 'tenant':34,310,520,530 'text/markdown':206 'tool':153 'topic':349,373,396,480,604 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'topolog':584 'traffic':284,447,459 'troubleshoot':15,58,214,348,351,363 'udr':576 'udrs/topologies':316 'understand':375,386 'url':350,374,397,481,605 'use':24,81,87,105,120,177,194,289,326,414,420,437,473,522,569,588 'user':142,159,553 'user-defin':552 'verifi':231,361,591 'version':146 'via':306,534 'virtual':3,10,43,54,223,253,274,337,354,388,399,426,506,541,558,589,608 'vm':594 'vnet':483 'webpag':196 'work':238","prices":[{"id":"3a6170c5-3497-43ca-ae68-244c149502c8","listingId":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T22:00:24.569Z"}],"sources":[{"listingId":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-virtual-network-manager","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-virtual-network-manager","isPrimary":false,"firstSeenAt":"2026-04-18T22:00:24.569Z","lastSeenAt":"2026-04-22T00:53:39.356Z"}],"details":{"listingId":"2fddefa2-d6be-4d4f-a1c3-91e0e8d6bda2","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-virtual-network-manager","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":497,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-04-19T02:43:40Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"cbb362fa8a0e35f81a9ec38c10dc7a4209e8e552","skill_md_path":"skills/azure-virtual-network-manager/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-virtual-network-manager"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-virtual-network-manager","description":"Expert knowledge for Azure Virtual Network Manager development including troubleshooting, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing AVNM IPAM pools, network groups, cross-tenant connectivity, security admin rules, or ARG queries, and other Azure Virtual Network Manager related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual WAN (use azure-virtual-wan), Azure Network Watcher (use azure-network-watcher), Azure Networking (use azure-networking).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-virtual-network-manager"},"updatedAt":"2026-04-22T00:53:39.356Z"}}