I would like to place a delete lock on an Azure resource group so that the resource group itself can't be deleted -- but there should not be restriction on deletion of any resources residing in the group. The problem is that if I place such a delete lock on the resource group , all the resources within that resource group inherit the lock and then they can't be deleted. Is there a workaround ?
Preventing inheritance of delete lock on resource group
394 Views Asked by Dhiraj At
1
There are 1 best solutions below
Related Questions in AZURE-RESOURCE-GROUP
- Azure ARM Templates
- StorageAccountAlreadyExists when running build step Azure Resource Group Deployment
- How to get all Azure Resources without tags in a Azure Resource Group
- Creating resource groups in Azure with c#
- Azure resource group URL
- Get monthly Azure billing invoice of Resource Group usage via email
- Azure- Getting (AuthorizationFailed) even with owner role assigned to my account
- Azure Resource Manager ResourceGroups deployment
- Exclude Resource Groups that Contain Resource Type X
- How do I create a nested for each when running a azure cli command using Powershell?
- Not enough cores to deploy resource group error on Azure for Students
- Azure Devops Pipeline Stages: Independent Security
- Azure Kubernetes Service Creates Extra Resource Groups
- Azure Resource Groups - Moving to a new Resource Group. Is there any downtime?
- Looping through values in ARM templates
Related Questions in AZURE-RESOURCE-LOCK
- Selective Resource/Infra isolation on Azure. Possible?
- List and manage Azure Resource Locks with Python SDK
- How to lock storage accounts in Azure using Python SDK
- Azure - prevent Subscription Owner from modifying specific Resource Group?
- Preventing inheritance of delete lock on resource group
- Can an owner remove a read-only or non-delete lock in Azure?
- How to stop a Storage Event Trigger of Azure Data Factory using Powershell when there is a Delete lock on the Resource group?
- Lock azure resource with PowerShell
- Managing Azure resource locks through Terraform
- How to delete a resource lock in Azure using command line?
- Azure Resource Lock through policy but delete through DevOps
- How to lock all resources in an Azure Resource group using Python
- Azure Automation - Unable to Remove-AzResourceLock
- Automatically lock resources based on the tags - Microsoft Azure
- Azure Policy: Delete lock on resource group
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
So I had this exact problem, I had users using resource groups and did not want them to be able to delete the actual resource group but still be able to delete the resources inside,
I fixed this by using custom roles, I created a custom role and cloned the contributor role and added a deny assignment to the role
I found the reference in additional resource provider operations. This will allow the user to still attempt to delete the group, however they will get an error if they try to. You can also find much more role based access control resources there as well. I hope this helped!