Teardown
sprig’s self-contained design makes removal mechanical:
- Builder sandboxes — delete each
rg-sprig-user-*resource group (removes all published apps). - Platform — delete
rg-sprig-platform. - Entra — delete the app registrations:
sprig-platform-api,sprig-cli, and the per-appsprig-app-*registrations (all owned by the platform identity, so they’re easy to enumerate). - Subscription budget — delete the
sprig-monthlybudget. - Builder machines: remove
~/.sprig/(config + token cache) and the plugin folder.
Nothing else was touched: no changes outside the sprig resource groups, no tenant-wide settings, no residual grants — the platform identity’s rights die with the identity.
Export the audit trail (storage tables) before step 2 if you have retention requirements.