CODEWITHSUNDEEP
azurevirtual-machineazure-virtual-machine
Indrajeet Singh
Indrajeet Singh

Reputation: 532

Why Azure provides multiple delete locks on a virtual machine?

As we know that we can apply a lock to prevent the accidental deletion of a VM in azure. To delete it - we have to un-assign/delete the lock first. But Why azure provides multiple delete locks on the same resource? even a single lock will work as same as multiple locks.

Below is an example image - enter image description here

Upvotes: 8

Views: 14131

Answers (3)

Naveed Sait
Naveed Sait

Reputation: 116

I tried this to seek an answer.

Entity A puts a Delete lock for a reason. Entity B puts a (second) Delete lock for another reason.

After a while, when Entity A is happy that he/she no longer needs the lock, he/she will remove it. However, Entity B still has a reason to keep the resource locked from being deleted.

Tried this today. Thanks for bringing up this scenario. Hope the answer helps.

Upvotes: 10

Vinod Nair
Vinod Nair

Reputation: 11

Probably some resource will need a 'Delete' acceptance from different Admin groups, hence the multiple locks?

If it's a critical resource, the the first lock can be a general, inherited one and the second lock can be from a higher admin group.

Upvotes: 1

Nancy Xiong
Nancy Xiong

Reputation: 28234

You can set the lock level to CanNotDelete or ReadOnly. For your question that why Azure provides multiple delete locks on the same resource. I think the main reason is that you could directly set a lock on a subscription, resource group, or resource level in a resource UI instead of going back to set the lock in each resource UI.

For example, you can set a resource group level Delete lock by selecting resource group on virtual machine locks UI, all resources within that resource group inherit the same lock.

enter image description here

When you apply a lock at a parent scope, all resources within that scope inherit the same lock. Even resources you add later inherit the lock from the parent. The most restrictive lock in the inheritance takes precedence.

Reference: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

Upvotes: 1

Related Questions