how do you connection troubleshoot or NSG on delegated subnets ?

It seems there isn't a way to use network water tools for the common scenario that involves delegated subnet or non-VM, vmss resources.