my resource lock on my VM wont stay on "delete". it keeps going back to "read-only"

Question

my resource lock on my VM wont stay on "delete". it keeps going back to "read-only"

Ahmed Idris 0

Tech-Hyd-1989 5,816 Reputation points

2023-06-12T08:05:52.49+00:00

Hello Ahmed Idris

If the resource lock on your Azure Virtual Machine (VM) keeps changing back to "read-only" after setting it to "delete," it could be due to the following reasons:

Inherited lock: Check if the resource lock is being inherited from a parent resource. Resource locks applied at a higher level, such as a resource group, can override the lock settings at the individual resource level. Make sure there are no conflicting locks at the parent level that are overriding the "delete" lock on your VM.

Lock conflict: Ensure that there are no conflicting locks on the VM or any associated resources. Conflicting locks can occur if multiple users or processes are trying to apply different lock settings simultaneously. Resolve any conflicts by coordinating with other users or processes that might be applying locks.

Insufficient permissions: Verify that you have the necessary permissions to apply and manage resource locks. To apply a lock, you need the appropriate RBAC (Role-Based Access Control) permissions at the subscription, resource group, or resource level. Check your user or service principal permissions and ensure they have the required access rights.

Automation or management processes: If you are using automation or management processes, such as Azure Automation, Azure Policy, or infrastructure-as-code (IaC) tools, review those processes to see if they are inadvertently modifying the resource lock. These processes might have their own logic that changes the lock setting, possibly overriding your manual changes.

Service limitations or issues: It's also possible that there might be service limitations or temporary issues impacting the behavior of resource locks. Check the Azure service status page or any relevant documentation for any known issues related to resource locks.

If you have verified the above factors and are still experiencing issues with the resource lock, it is recommended to reach out to Azure support for further investigation. They can provide specific guidance and assistance in troubleshooting the problem with your resource lock settings.

If this does answer your question, please feel free to mark it as the answer as a token of appreciation.
KarishmaTiwari-MSFT 20,777 Reputation points Microsoft Employee Moderator

2023-06-13T00:30:32.6633333+00:00

@Ahmed Idris Checking in to see if any of the answers/comments helped.

If you have any questions at all, please let me know in the "comments" and I would be happy to help you. Comment is the fastest way of notifying the experts.

Please don’t forget to Accept Answer and hit Yes for "was this answer helpful" wherever the information provided helps you. This can be beneficial to other community members for remediation for similar issues.

1 answer

Your answer

KarishmaTiwari-MSFT 20,777 Reputation points Microsoft Employee Moderator

2023-06-13T00:30:32.6633333+00:00

@Ahmed Idris Checking in to see if any of the answers/comments helped.

If you have any questions at all, please let me know in the "comments" and I would be happy to help you. Comment is the fastest way of notifying the experts.

Please don’t forget to Accept Answer and hit Yes for "was this answer helpful" wherever the information provided helps you. This can be beneficial to other community members for remediation for similar issues.

Answer 1

@Ahmed Idris Thanks for posting your query on Microsoft Q&A.

To create or delete management locks, you need access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Only the Owner and the User Access Administrator built-in roles can create and delete management locks. You can create a custom role with the required permissions.

Can you please confirm/ensure that you have the right permissions/role and then try again?
How did you try to configure lock on your resource/VM, via Azure Portal, CLI, PowerShell, template? Let me know.

Try applying the lock on the resource by following the steps in this document. For example, follow this to achieve this via Azure Portal: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json#portal

Please share screenshots of the configured lock on Azure Portal.

Let me know the results after trying the suggested steps and I can investigate further. Thanks.

Share via

my resource lock on my VM wont stay on "delete". it keeps going back to "read-only"

1 answer

Your answer