Share via

Removing Role Assignments when the Scope is locked - tracking down what to unlock

Jen O 1 Reputation point
2021-01-19T19:08:04.887+00:00

I've mistakenly added a role assignment (Storage Account Contributor) to a file share.
Now that I'm trying to remove that role assignment, I'm receiving an error stating that the scope is locked.
When access the locks, the only lock listed is the "Azure Backup Protection" lock - the one autocreated by Azure backup. Is this the lock I need to remove in order to successfully remove the role assignment?
If this isn't the lock to be removed, is there another place to find said lock or a means to successfully remove the role assignment?
Thanks!

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,186 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,754 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
686 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,476 Reputation points Microsoft Employee
    2021-01-19T21:51:46.9+00:00

    @Jen O
    Thank you for your post!

    When you apply a lock at a parent scope (i.e. Resource group, subscription, etc.), all resources within that scope inherit the same lock. Even resources you add later inherit the lock from the parent. Therefore, you'll have to delete the auto-created Azure backup lock, remove/delete the role assignment that you accidently assigned, and then re-create the lock, I'd recommend taking any screenshots of the lock details, incase you want to recreate the lock to how it is now.

    If you have any other questions or run into any problems, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.