removing auto-generated subs with max 1per user.

Author: EMaher

tests/integration/all-resource-types/run-roundtrip-test.ps1

@@ -135,6 +135,63 @@ function Get-ApiopsLogLevel([string]$ScriptLogLevel) {
     }
 }
 
+function Remove-KnownAutoSubscriptions {
+    param(
+        [Parameter(Mandatory)][string]$SubscriptionId,
+        [Parameter(Mandatory)][string]$ResourceGroup,
+        [Parameter(Mandatory)][string]$ServiceName,
+        [Parameter(Mandatory)][string]$ScopeLabel
+    )
+
+    Write-Host "   Cleaning auto-created subscriptions in ${ScopeLabel} APIM..."
+    $listUri = "https://management.azure.com/subscriptions/$SubscriptionId/resourceGroups/$ResourceGroup/providers/Microsoft.ApiManagement/service/$ServiceName/subscriptions?api-version=2025-09-01-preview"
+    $listRaw = Invoke-MaskedAzCommand -Replacements @{
+        $SubscriptionId = Protect-SubscriptionId -Value $SubscriptionId
+        $ResourceGroup  = Protect-ResourceGroupName -Value $ResourceGroup
+        $ServiceName    = Protect-ApimName -Value $ServiceName
+    } -Arguments @('rest', '--method', 'get', '--url', $listUri)
+
+    if ($LASTEXITCODE -ne 0 -or -not $listRaw) {
+        Write-Host "   ⚠️  Could not list subscriptions for cleanup in ${ScopeLabel}"
+        return
+    }
+
+    try {
+        $payload = $listRaw | ConvertFrom-Json
+    } catch {
+        Write-Host "   ⚠️  Could not parse subscription list for cleanup in ${ScopeLabel}"
+        return
+    }
+
+    $candidates = @($payload.value | Where-Object {
+        $name = [string]$_.name
+        $displayName = [string]$_.properties.displayName
+        $scope = [string]$_.properties.scope
+        ($name -match '^[a-f0-9]{24}$') -and [string]::IsNullOrEmpty($displayName) -and ($scope -match '/products/.+$')
+    })
+
+    if ($candidates.Count -eq 0) {
+        Write-Host "   No auto-created subscriptions found in ${ScopeLabel}"
+        return
+    }
+
+    foreach ($candidate in $candidates) {
+        $subName = [string]$candidate.name
+        $uri = "https://management.azure.com/subscriptions/$SubscriptionId/resourceGroups/$ResourceGroup/providers/Microsoft.ApiManagement/service/$ServiceName/subscriptions/$subName?api-version=2025-09-01-preview"
+        $null = Invoke-MaskedAzCommand -Replacements @{
+            $SubscriptionId = Protect-SubscriptionId -Value $SubscriptionId
+            $ResourceGroup  = Protect-ResourceGroupName -Value $ResourceGroup
+            $ServiceName    = Protect-ApimName -Value $ServiceName
+        } -Arguments @('rest', '--method', 'delete', '--url', $uri)
+
+        if ($LASTEXITCODE -eq 0) {
+            Write-Host "   Deleted subscription: $subName"
+        } else {
+            Write-Host "   ⚠️  Failed to delete subscription: $subName"
+        }
+    }
+}
+
 function Invoke-Teardown {
     if ($SkipTeardown) {
         Write-Host "⏭️  Teardown skipped (-SkipTeardown)"
@@ -487,7 +544,9 @@ try {
     Write-Host "   Source: $(Protect-ApimName -Value $sourceName) (sub: $(Protect-SubscriptionId -Value $sourceSubId), rg: $(Protect-ResourceGroupName -Value $sourceRg))"
     Write-Host "   Output: $ExtractOutputDir"
 
-        $apiopsLogLevel = Get-ApiopsLogLevel -ScriptLogLevel $LogLevel
+    Remove-KnownAutoSubscriptions -SubscriptionId $sourceSubId -ResourceGroup $sourceRg -ServiceName $sourceName -ScopeLabel 'source'
+
+    $apiopsLogLevel = Get-ApiopsLogLevel -ScriptLogLevel $LogLevel
 
     # For SKUs that support workspaces (Premium / PremiumV2), pass a filter file
     # with the workspace name so the extractor includes workspace-scoped resources.
@@ -630,6 +689,8 @@ loggers:
     Write-Host "   Target: $(Protect-ApimName -Value $targetName) (sub: $(Protect-SubscriptionId -Value $targetSubId), rg: $(Protect-ResourceGroupName -Value $targetRg))"
     Write-Host "   Input:  $ExtractOutputDir"
 
+    Remove-KnownAutoSubscriptions -SubscriptionId $targetSubId -ResourceGroup $targetRg -ServiceName $targetName -ScopeLabel 'target'
+
     $publishExitCode = Invoke-MaskedApiopsCommand -Replacements @{
         $targetSubId = Protect-SubscriptionId -Value $targetSubId
         $targetRg    = Protect-ResourceGroupName -Value $targetRg