Resource Locks

In Azure Portal, the Administrator role can lock an Azure subscription, resource group, or resource to protect them from accidental deletions and modifications. This is the topmost priority in the subscription and overrides user permissions. Locks can be set so that they prevent either deletions or changes.

Even if an organization has correctly set up Azure RBAC policies and given its users the required access, there’s still a risk that people with the right level of access could delete critical cloud resources. So, in simple terms, we can consider resource locks as a warning system that reminds us that the given resource shouldn’t be deleted or changed.