diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/applicationGateway.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/applicationGateway.json
index 3af406c783f8..130d6f29063a 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/applicationGateway.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/applicationGateway.json
@@ -989,6 +989,7 @@
           "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the application gateway IP configuration resource."
         }
@@ -1007,10 +1008,12 @@
           "description": "Name of the IP configuration that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1029,6 +1032,7 @@
           "description": "Certificate public data."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the authentication certificate resource."
         }
@@ -1047,10 +1051,12 @@
           "description": "Name of the authentication certificate that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1073,6 +1079,7 @@
           "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the trusted root certificate resource."
         }
@@ -1091,10 +1098,12 @@
           "description": "Name of the trusted root certificate that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1117,6 +1126,7 @@
           "description": "Password for the pfx file specified in data. Only applicable in PUT request."
         },
         "publicCertData": {
+          "readOnly": true,
           "type": "string",
           "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request."
         },
@@ -1125,6 +1135,7 @@
           "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the SSL certificate resource."
         }
@@ -1143,10 +1154,12 @@
           "description": "Name of the SSL certificate that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1177,6 +1190,7 @@
           "description": "Reference of the PublicIP resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the frontend IP configuration resource."
         }
@@ -1195,10 +1209,12 @@
           "description": "Name of the frontend IP configuration that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1218,6 +1234,7 @@
           "description": "Frontend port."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the frontend port resource."
         }
@@ -1236,10 +1253,12 @@
           "description": "Name of the frontend port that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1267,6 +1286,7 @@
     "ApplicationGatewayBackendAddressPoolPropertiesFormat": {
       "properties": {
         "backendIPConfigurations": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "./networkInterface.json#/definitions/NetworkInterfaceIPConfiguration"
@@ -1281,6 +1301,7 @@
           "description": "Backend addresses."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the backend address pool resource."
         }
@@ -1299,10 +1320,12 @@
           "description": "Name of the backend address pool that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1385,6 +1408,7 @@
           "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the backend HTTP settings resource."
         }
@@ -1403,10 +1427,12 @@
           "description": "Name of the backend http settings that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1445,6 +1471,7 @@
           "description": "Applicable only if protocol is https. Enables SNI for multi-hosting."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the HTTP listener resource."
         },
@@ -1474,10 +1501,12 @@
           "description": "Name of the HTTP listener that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1515,10 +1544,11 @@
           "description": "Rewrite rule set resource of URL path map path rule."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the path rule resource."
         },
-         "firewallPolicy": {
+        "firewallPolicy": {
           "$ref": "./network.json#/definitions/SubResource",
           "description": "Reference to the FirewallPolicy resource."
         }
@@ -1537,10 +1567,12 @@
           "description": "Name of the path rule that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1595,6 +1627,7 @@
           "description": "Criterion for classifying a healthy probe response."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the probe resource."
         },
@@ -1636,10 +1669,12 @@
           "description": "Name of the probe that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1699,6 +1734,7 @@
           "description": "Redirect configuration resource of the application gateway."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the request routing rule resource."
         }
@@ -1717,10 +1753,12 @@
           "description": "Name of the request routing rule that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -1910,10 +1948,12 @@
           "description": "Name of the redirect configuration that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -2069,10 +2109,12 @@
           "description": "Autoscale Configuration."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the application gateway resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the application gateway resource."
         },
@@ -2094,6 +2136,7 @@
           "description": "Properties of the application gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -2158,6 +2201,7 @@
           "description": "Path rule of URL path map resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the URL path map resource."
         }
@@ -2176,10 +2220,12 @@
           "description": "Name of the URL path map that is unique within an Application Gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Type of the resource."
         }
@@ -2407,6 +2453,7 @@
     "ApplicationGatewayFirewallRuleSetPropertiesFormat": {
       "properties": {
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the web application firewall rule set."
         },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/azureFirewall.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/azureFirewall.json
index b31537281b0e..a9842af3a681 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/azureFirewall.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/azureFirewall.json
@@ -339,6 +339,7 @@
           "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the Azure firewall IP configuration resource."
         }
@@ -425,6 +426,7 @@
           "description": "IP configuration of the Azure Firewall resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the Azure firewall resource."
         },
@@ -531,6 +533,7 @@
           "description": "Collection of rules used by a application rule collection."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the application rule collection resource."
         }
@@ -643,6 +646,7 @@
           "description": "Collection of rules used by a NAT rule collection."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the NAT rule collection resource."
         }
@@ -770,6 +774,7 @@
           "description": "Collection of rules used by a network rule collection."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the network rule collection resource."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/bastionHost.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/bastionHost.json
index 4e541ef14888..d8469340b609 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/bastionHost.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/bastionHost.json
@@ -274,6 +274,7 @@
           "description": "Reference of the PublicIP resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the bastion host IP configuration resource."
         },
@@ -331,6 +332,7 @@
           "description": "FQDN for the endpoint on which bastion host is accessible."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the bastion host resource."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitAuthorizationCreate.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitAuthorizationCreate.json
index 221bbd28fcd0..2410e6009f6b 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitAuthorizationCreate.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitAuthorizationCreate.json
@@ -6,10 +6,7 @@
     "api-version": "2019-09-01",
     "subscriptionId": "subid",
     "authorizationParameters": {
-      "properties": {
-        "authorizationKey": "authKey",
-        "authorizationUseStatus": "Available"
-      }
+      "properties": {}
     }
   },
   "responses": {
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitPeeringCreate.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitPeeringCreate.json
index 9e3e5eeb5dfb..4ab42b42d7a9 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitPeeringCreate.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/ExpressRouteCircuitPeeringCreate.json
@@ -7,7 +7,6 @@
     "subscriptionId": "subid",
     "peeringParameters": {
       "properties": {
-        "azureASN": 12076,
         "peerASN": 200,
         "primaryPeerAddressPrefix": "192.168.16.252/30",
         "secondaryPeerAddressPrefix": "192.168.18.252/30",
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/LoadBalancerCreateWithInboundNatPool.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/LoadBalancerCreateWithInboundNatPool.json
index b65e08ef63ce..66675c084979 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/LoadBalancerCreateWithInboundNatPool.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/LoadBalancerCreateWithInboundNatPool.json
@@ -15,10 +15,6 @@
             "properties": {
               "privateIPAllocationMethod": "Dynamic",
               "subnet": {
-                "properties": {
-                  "serviceEndpoints": [],
-                  "resourceNavigationLinks": []
-                },
                 "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/lbvnet/subnets/lbsubnet"
               }
             },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/RouteFilterCreate.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/RouteFilterCreate.json
index ce412a8a4249..65035733ccc6 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/RouteFilterCreate.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/RouteFilterCreate.json
@@ -22,8 +22,7 @@
               ]
             }
           }
-        ],
-        "peerings": []
+        ]
       }
     }
   },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/VirtualNetworkGatewayConnectionCreate.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/VirtualNetworkGatewayConnectionCreate.json
index 24859dd08a8b..73ba7736f9d3 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/VirtualNetworkGatewayConnectionCreate.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/examples/VirtualNetworkGatewayConnectionCreate.json
@@ -29,8 +29,7 @@
             "activeActive": false,
             "sku": {
               "name": "VpnGw1",
-              "tier": "VpnGw1",
-              "capacity": 2
+              "tier": "VpnGw1"
             },
             "bgpSettings": {
               "asn": 65514,
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCircuit.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCircuit.json
index 49be0869e884..5a7bd9449d00 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCircuit.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCircuit.json
@@ -1450,10 +1450,12 @@
     "AuthorizationPropertiesFormat": {
       "properties": {
         "authorizationKey": {
+          "readOnly": true,
           "type": "string",
           "description": "The authorization key."
         },
         "authorizationUseStatus": {
+          "readOnly": true,
           "type": "string",
           "description": "The authorization use status.",
           "enum": [
@@ -1466,6 +1468,7 @@
           }
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the authorization resource."
         }
@@ -1520,6 +1523,7 @@
     "ExpressRouteCircuitPeeringConfig": {
       "properties": {
         "advertisedPublicPrefixes": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "type": "string"
@@ -1633,6 +1637,7 @@
           "description": "The peering state."
         },
         "azureASN": {
+          "readOnly": true,
           "type": "integer",
           "format": "int32",
           "description": "The Azure ASN."
@@ -1653,10 +1658,12 @@
           "description": "The secondary address prefix."
         },
         "primaryAzurePort": {
+          "readOnly": true,
           "type": "string",
           "description": "The primary port."
         },
         "secondaryAzurePort": {
+          "readOnly": true,
           "type": "string",
           "description": "The secondary port."
         },
@@ -1678,6 +1685,7 @@
           "description": "The peering stats of express route circuit."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the express route circuit peering resource."
         },
@@ -1686,6 +1694,7 @@
           "description": "The GatewayManager Etag."
         },
         "lastModifiedBy": {
+          "readOnly": true,
           "type": "string",
           "description": "Who was the last to modify the peering."
         },
@@ -1702,6 +1711,7 @@
           "description": "The ExpressRoute connection."
         },
         "connections": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/ExpressRouteCircuitConnection"
@@ -1808,6 +1818,7 @@
           "description": "The authorization key."
         },
         "circuitConnectionStatus": {
+          "readOnly": true,
           "$ref": "#/definitions/CircuitConnectionStatus",
           "description": "Express Route Circuit connection state."
         },
@@ -2003,10 +2014,12 @@
           "description": "Allow classic operations."
         },
         "circuitProvisioningState": {
+          "readOnly": true,
           "type": "string",
           "description": "The CircuitProvisioningState state of the resource."
         },
         "serviceProviderProvisioningState": {
+          "readOnly": true,
           "$ref": "#/definitions/ServiceProviderProvisioningState",
           "description": "The ServiceProviderProvisioningState state of the resource."
         },
@@ -2025,6 +2038,7 @@
           "description": "The list of peerings."
         },
         "serviceKey": {
+          "readOnly": true,
           "type": "string",
           "description": "The ServiceKey."
         },
@@ -2051,6 +2065,7 @@
           "description": "The identifier of the circuit traffic. Outer tag for QinQ encapsulation."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the express route circuit resource."
         },
@@ -2059,6 +2074,7 @@
           "description": "The GatewayManager Etag."
         },
         "globalReachEnabled": {
+          "readOnly": true,
           "type": "boolean",
           "description": "Flag denoting Global reach status."
         }
@@ -2259,6 +2275,7 @@
           "description": "A list of bandwidths offered."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the express route service provider resource."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCrossConnection.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCrossConnection.json
index 1d5d0f38403c..403e73601886 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCrossConnection.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteCrossConnection.json
@@ -879,6 +879,7 @@
           "description": "The GatewayManager Etag."
         },
         "lastModifiedBy": {
+          "readOnly": true,
           "type": "string",
           "description": "Who was the last to modify the peering."
         },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteGateway.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteGateway.json
index 9e0de7d9e6e5..74d88fd75ee7 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteGateway.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRouteGateway.json
@@ -536,6 +536,7 @@
           }
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the express route gateway resource."
         },
@@ -584,6 +585,7 @@
       ],
       "properties": {
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the express route connection resource."
         },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRoutePort.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRoutePort.json
index 2ecc3e580208..b55aa108ad86 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRoutePort.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/expressRoutePort.json
@@ -758,6 +758,7 @@
           "description": "The provisioning state of the express route port resource."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the express route port resource."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/firewallPolicy.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/firewallPolicy.json
index 08c410ff98e7..f74f71518a45 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/firewallPolicy.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/firewallPolicy.json
@@ -580,6 +580,7 @@
           }
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the firewall policy resource."
         },
@@ -659,6 +660,7 @@
           "description": "Group of Firewall Policy rules."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the firewall policy rule group resource."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/loadBalancer.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/loadBalancer.json
index 3b2e57040ed1..5dd0d5b70631 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/loadBalancer.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/loadBalancer.json
@@ -1179,6 +1179,7 @@
           "description": "The reference of the Public IP Prefix resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the frontend IP configuration resource."
         }
@@ -1197,6 +1198,7 @@
           "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1252,6 +1254,7 @@
           "description": "An array of references to outbound rules that use this backend address pool."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the backend address pool resource."
         }
@@ -1270,6 +1273,7 @@
           "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1345,6 +1349,7 @@
           "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the load balancing rule resource."
         }
@@ -1367,6 +1372,7 @@
           "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1426,6 +1432,7 @@
           "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the probe resource."
         }
@@ -1448,6 +1455,7 @@
           "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1503,6 +1511,7 @@
           "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the inbound NAT rule resource."
         }
@@ -1521,6 +1530,7 @@
           "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1576,6 +1586,7 @@
           "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the inbound NAT pool resource."
         }
@@ -1600,6 +1611,7 @@
           "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1635,6 +1647,7 @@
           "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the outbound rule resource."
         },
@@ -1679,6 +1692,7 @@
           "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1747,10 +1761,12 @@
           "description": "The outbound rules."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the load balancer resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the load balancer resource."
         }
@@ -1769,6 +1785,7 @@
           "description": "Properties of load balancer."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/natGateway.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/natGateway.json
index 3a3ea7af4c9d..ec7a2b8e44a8 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/natGateway.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/natGateway.json
@@ -373,10 +373,12 @@
           "description": "An array of references to the subnets using this nat gateway resource."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the NAT gateway resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the NAT gateway resource."
         }
@@ -402,6 +404,7 @@
           "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkInterface.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkInterface.json
index f3e5045e8662..5a9b4b014200 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkInterface.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkInterface.json
@@ -803,6 +803,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -895,6 +896,7 @@
           "description": "Application security groups in which the IP configuration is included."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the network interface IP configuration."
         },
@@ -941,6 +943,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -962,6 +965,7 @@
           "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection."
         },
         "appliedDnsServers": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "type": "string"
@@ -973,10 +977,12 @@
           "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network."
         },
         "internalFqdn": {
+          "readOnly": true,
           "type": "string",
           "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network."
         },
         "internalDomainNameSuffix": {
+          "readOnly": true,
           "type": "string",
           "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix."
         }
@@ -1007,6 +1013,7 @@
           "description": "A list of IPConfigurations of the network interface."
         },
         "tapConfigurations": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/NetworkInterfaceTapConfiguration"
@@ -1018,10 +1025,12 @@
           "description": "The DNS settings in network interface."
         },
         "macAddress": {
+          "readOnly": true,
           "type": "string",
           "description": "The MAC address of the network interface."
         },
         "primary": {
+          "readOnly": true,
           "type": "boolean",
           "description": "Whether this is a primary network interface on a virtual machine."
         },
@@ -1042,10 +1051,12 @@
           "description": "A list of references to linked BareMetal resources."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the network interface resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the network interface resource."
         }
@@ -1060,6 +1071,7 @@
           "description": "Properties of the network interface."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -1386,6 +1398,7 @@
           "description": "The reference of the public IP resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the IP configuration resource."
         }
@@ -1404,6 +1417,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkProfile.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkProfile.json
index 2916e6d629b6..ea6fb29e5e1c 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkProfile.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkProfile.json
@@ -325,6 +325,7 @@
     "NetworkProfilePropertiesFormat": {
       "properties": {
         "containerNetworkInterfaces": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/ContainerNetworkInterface"
@@ -359,6 +360,7 @@
           "description": "Network profile properties."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -389,6 +391,7 @@
     "ContainerNetworkInterfacePropertiesFormat": {
       "properties": {
         "containerNetworkInterfaceConfiguration": {
+          "readOnly": true,
           "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration",
           "description": "Container network interface configuration from which this container network interface is created."
         },
@@ -397,6 +400,7 @@
           "description": "Reference to the container to which this container network interface is attached."
         },
         "ipConfigurations": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration"
@@ -428,6 +432,7 @@
           "description": "Sub Resource type."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -480,6 +485,7 @@
           "description": "Sub Resource type."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -522,6 +528,7 @@
           "description": "Sub Resource type."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -569,6 +576,7 @@
           "description": "Sub Resource type."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkSecurityGroup.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkSecurityGroup.json
index e6796c55ef70..74be87d2ce6e 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkSecurityGroup.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkSecurityGroup.json
@@ -741,6 +741,7 @@
           "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the security rule resource."
         }
@@ -764,6 +765,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -801,6 +803,7 @@
           "description": "A collection of security rules of the network security group."
         },
         "defaultSecurityRules": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/SecurityRule"
@@ -824,10 +827,12 @@
           "description": "A collection of references to subnets."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the network security group resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the network security group resource."
         }
@@ -842,6 +847,7 @@
           "description": "Properties of the network security group."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkWatcher.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkWatcher.json
index eff7a22af661..cbe6e734ea0c 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkWatcher.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/networkWatcher.json
@@ -1541,6 +1541,7 @@
     "NetworkWatcher": {
       "properties": {
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
@@ -1560,6 +1561,7 @@
     "NetworkWatcherPropertiesFormat": {
       "properties": {
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the network watcher resource."
         }
@@ -2022,8 +2024,8 @@
           "description": "ID of the packet capture operation."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
-          "default": "A unique read-only string that changes whenever the resource is updated.",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "properties": {
@@ -2037,6 +2039,7 @@
     "PacketCaptureResultProperties": {
       "properties": {
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the packet capture session."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateEndpoint.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateEndpoint.json
index e61b4f706ada..4987a879ba1c 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateEndpoint.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateEndpoint.json
@@ -395,6 +395,7 @@
           "description": "Properties of the private endpoint."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -421,6 +422,7 @@
           "description": "An array of references to the network interfaces created for this private endpoint."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the private endpoint resource."
         },
@@ -473,6 +475,7 @@
     "PrivateLinkServiceConnectionProperties": {
       "properties": {
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the private link service connection resource."
         },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateLinkService.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateLinkService.json
index e1202d4daf40..5114d48fdc9e 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateLinkService.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/privateLinkService.json
@@ -622,6 +622,7 @@
           "description": "Properties of the private link service."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -658,10 +659,12 @@
           "description": "An array of references to the network interfaces created for this private link service."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the private link service resource."
         },
         "privateEndpointConnections": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/PrivateEndpointConnection"
@@ -759,6 +762,7 @@
           "description": "Whether the ip configuration is primary or not."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the private link service IP configuration resource."
         },
@@ -801,6 +805,7 @@
     "PrivateEndpointConnectionProperties": {
       "properties": {
         "privateEndpoint": {
+          "readOnly": true,
           "$ref": "./privateEndpoint.json#/definitions/PrivateEndpoint",
           "description": "The resource of private end point."
         },
@@ -809,6 +814,7 @@
           "description": "A collection of information about the state of the connection between service consumer and provider."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the private endpoint connection resource."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpAddress.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpAddress.json
index 54ba5fdc8903..a8ea82224e78 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpAddress.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpAddress.json
@@ -389,10 +389,12 @@
           "description": "The idle timeout of the public IP address."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the public IP address resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the public IP address resource."
         }
@@ -411,6 +413,7 @@
           "description": "Public IP address properties."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpPrefix.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpPrefix.json
index a25c9cf1d2e7..b738bed31fe9 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpPrefix.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/publicIpPrefix.json
@@ -360,10 +360,12 @@
           "description": "The Length of the Public IP Prefix."
         },
         "ipPrefix": {
+          "readOnly": true,
           "type": "string",
           "description": "The allocated Prefix."
         },
         "publicIPAddresses": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/ReferencedPublicIpAddress"
@@ -376,10 +378,12 @@
           "description": "The reference to load balancer frontend IP configuration associated with the public IP prefix."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the public IP prefix resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the public IP prefix resource."
         }
@@ -398,6 +402,7 @@
           "description": "Public IP prefix properties."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeFilter.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeFilter.json
index 0837e7f8c5ab..070d98a77224 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeFilter.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeFilter.json
@@ -703,6 +703,7 @@
           "description": "Collection of RouteFilterRules contained within a route filter."
         },
         "peerings": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "./expressRouteCircuit.json#/definitions/ExpressRouteCircuitPeering"
@@ -710,6 +711,7 @@
           "description": "A collection of references to express route circuit peerings."
         },
         "ipv6Peerings": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "./expressRouteCircuit.json#/definitions/ExpressRouteCircuitPeering"
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeTable.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeTable.json
index a77f1acb6f7d..743b2588d2ea 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeTable.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/routeTable.json
@@ -562,7 +562,7 @@
           "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance."
         },
         "provisioningState": {
-          "type": "string",
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the route resource."
         }
@@ -584,6 +584,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -617,6 +618,7 @@
           "description": "Whether to disable the routes learned by BGP on that route table. True means disable."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the route table resource."
         }
@@ -631,6 +633,7 @@
           "description": "Properties of the route table."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/serviceEndpointPolicy.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/serviceEndpointPolicy.json
index 14d6c04479e1..59722c5cdf2f 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/serviceEndpointPolicy.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/serviceEndpointPolicy.json
@@ -584,6 +584,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -649,6 +650,7 @@
           "description": "Properties of the service end point policy."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetwork.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetwork.json
index 0a080b735063..0e34741b6dfe 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetwork.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetwork.json
@@ -1162,6 +1162,7 @@
           "description": "A unique read-only string that changes whenever the resource is updated."
         },
         "type": {
+          "readOnly": true,
           "type": "string",
           "description": "Resource type."
         }
@@ -1232,6 +1233,7 @@
           "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)."
         },
         "actions": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "type": "string"
@@ -1258,6 +1260,7 @@
           "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -1333,6 +1336,7 @@
           "description": "Array of IP configuration profiles which reference this subnet."
         },
         "resourceNavigationLinks": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/ResourceNavigationLink"
@@ -1340,6 +1344,7 @@
           "description": "An array of references to the external resources using subnet."
         },
         "serviceAssociationLinks": {
+          "readOnly": true,
           "type": "array",
           "items": {
             "$ref": "#/definitions/ServiceAssociationLink"
@@ -1359,6 +1364,7 @@
           "description": "A read-only string identifying the intention of use for this subnet based on delegations and other user-defined properties."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the subnet resource."
         },
@@ -1387,6 +1393,7 @@
           "description": "A list of locations."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the service endpoint resource."
         }
@@ -1433,6 +1440,7 @@
           }
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the virtual network peering resource."
         }
@@ -1451,6 +1459,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -1474,6 +1483,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -1576,10 +1586,12 @@
           "description": "A list of peerings in a Virtual Network."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resourceGuid property of the Virtual Network resource."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the virtual network resource."
         },
@@ -1614,6 +1626,7 @@
           "description": "Properties of the virtual network."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -1803,6 +1816,7 @@
     "NetworkIntentPolicy": {
       "properties": {
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkGateway.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkGateway.json
index bf497cfb2a08..f1998a0a1498 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkGateway.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkGateway.json
@@ -2006,6 +2006,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -2092,6 +2093,7 @@
           "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the virtual network gateway resource."
         },
@@ -2141,6 +2143,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -2181,6 +2184,7 @@
           "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -2316,6 +2320,7 @@
           }
         },
         "capacity": {
+          "readOnly": true,
           "type": "integer",
           "format": "int32",
           "description": "The capacity."
@@ -2451,6 +2456,7 @@
           "description": "Properties of the virtual network gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -2657,6 +2663,7 @@
           "description": "The Traffic Selector Policies to be considered by this connection."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the virtual network gateway connection resource."
         },
@@ -2684,6 +2691,7 @@
           "description": "Properties of the virtual network gateway connection."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -2895,6 +2903,7 @@
           "description": "Local network gateway's BGP speaker settings."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the local network gateway resource."
         },
@@ -2914,6 +2923,7 @@
           "description": "Properties of the local network gateway."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -3044,6 +3054,7 @@
           "description": "The Traffic Selector Policies to be considered by this connection."
         },
         "resourceGuid": {
+          "readOnly": true,
           "type": "string",
           "description": "The resource GUID property of the virtual network gateway connection resource."
         },
@@ -3071,6 +3082,7 @@
           "description": "Properties of the virtual network gateway connection."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkTap.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkTap.json
index 639b2ad79725..152d1912e53b 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkTap.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualNetworkTap.json
@@ -323,6 +323,7 @@
           "description": "Virtual Network Tap Properties."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualWan.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualWan.json
index 137ce26016b8..16ead099cad9 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualWan.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/virtualWan.json
@@ -3174,6 +3174,7 @@
           "$ref": "#/definitions/OfficeTrafficCategory"
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the virtual WAN resource."
         },
@@ -3250,6 +3251,7 @@
           "description": "The set of bgp properties."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the VPN site resource."
         },
@@ -3321,6 +3323,7 @@
           "description": "The set of bgp properties."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the VPN site link resource."
         }
@@ -3429,6 +3432,7 @@
           "description": "The routeTable associated with this virtual hub."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the virtual hub resource."
         },
@@ -3535,6 +3539,7 @@
           "description": "Local network gateway's BGP speaker settings."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the VPN gateway resource."
         },
@@ -3653,6 +3658,7 @@
           "description": "Use local azure ip to initiate connection."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the VPN connection resource."
         },
@@ -3770,6 +3776,7 @@
           "description": "Use local azure ip to initiate connection."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the VPN site link connection resource."
         }
@@ -3840,6 +3847,7 @@
           "description": "Enable internet security."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the hub virtual network connection resource."
         }
@@ -4185,6 +4193,7 @@
           "description": "List of references to P2SVpnGateways."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }
@@ -4274,6 +4283,7 @@
           }
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the P2S VPN gateway resource."
         },
@@ -4438,6 +4448,7 @@
           "description": "The reference of the address space resource which represents Address space for P2S VpnClient."
         },
         "provisioningState": {
+          "readOnly": true,
           "$ref": "./network.json#/definitions/ProvisioningState",
           "description": "The provisioning state of the P2SConnectionConfiguration resource."
         }
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/webapplicationfirewall.json b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/webapplicationfirewall.json
index 5e922a5c1bb9..1b75d5d4217e 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/webapplicationfirewall.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2019-09-01/webapplicationfirewall.json
@@ -271,6 +271,7 @@
           "description": "Properties of the web application firewall policy."
         },
         "etag": {
+          "readOnly": true,
           "type": "string",
           "description": "A unique read-only string that changes whenever the resource is updated."
         }