thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Foundational

Resource Lock

Azure setting that prevents accidental deletion (CanNotDelete) or modification (ReadOnly) of subscriptions, resource groups or resources.

Definition

Locks apply at a scope and are inherited by child resources; they override permissions, so even an Owner must remove the lock first. ReadOnly can have side effects, such as blocking listing of storage account keys, because some read operations require POST requests.

Example

A CanNotDelete lock on the production resource group prevents anyone from deleting it by mistake.

Exam tip

Locks restrict even Owners; only users with Microsoft.Authorization/locks permissions can remove them.

Related terms