1# Azure Resource Graph Queries for Resource Discovery
2 
3Azure Resource Graph (ARG) enables fast, cross-subscription resource querying using KQL via `az graph query`. Use it for bulk resource discovery and relationship mapping.
4 
5## How to Query
6 
7Use the `extension_cli_generate` MCP tool to generate `az graph query` commands:
8 
9```yaml
10mcp_azure_mcp_extension_cli_generate
11  intent: "query Azure Resource Graph to <describe what you want to find>"
12  cli-type: "az"
13```
14 
15Or construct directly:
16 
17```bash
18az graph query -q "<KQL>" --query "data[].{name:name, type:type}" -o table
19```
20 
21> ⚠️ **Prerequisite:** `az extension add --name resource-graph`
22 
23## Key Tables
24 
25| Table | Contains |
26|-------|----------|
27| `Resources` | All ARM resource instances (name, type, location, properties, tags) |
28| `ResourceContainers` | Subscriptions, resource groups, management groups |
29 
30## Resource Discovery Patterns
31 
32**List all resources by type:**
33 
34```kql
35Resources | summarize count() by type | order by count_ desc
36```
37 
38**Inventory by location and type:**
39 
40```kql
41Resources | summarize count() by type, location | order by type asc
42```
43 
44**List all resources in a resource group with details:**
45 
46```kql
47Resources
48| where resourceGroup =~ '<rg-name>'
49| project name, type, location, sku.name, kind
50```
51 
52**Cross-subscription resource inventory with subscription names:**
53 
54```kql
55Resources
56| join kind=leftouter (
57    ResourceContainers
58    | where type == 'microsoft.resources/subscriptions'
59    | project subscriptionId, subscriptionName=name
60) on subscriptionId
61| project name, type, location, resourceGroup, subscriptionName
62```
63 
64**Discover network relationships (VNets, subnets, NICs):**
65 
66```kql
67Resources
68| where type =~ 'microsoft.network/virtualnetworks'
69| mv-expand subnet=properties.subnets
70| project vnetName=name, subnetName=subnet.name, addressPrefix=subnet.properties.addressPrefix, resourceGroup
71```
72 
73**Find App Services and their plans:**
74 
75```kql
76Resources
77| where type =~ 'microsoft.web/sites'
78| project name, kind, location, serverFarmId=properties.serverFarmId, resourceGroup
79```
80 
81## Tips
82 
83- Use `=~` for case-insensitive type matching (resource types are lowercase)
84- Navigate properties with `properties.fieldName`
85- Use `--first N` to limit result count
86- Use `--subscriptions` to scope to specific subscriptions
87- Use `mv-expand` to flatten arrays (e.g., subnets, IP configurations)
88