Is there any way to exclude few resource groups from subscription level lock in azure

Abhishek Singh 381 Reputation points
2021-02-15T06:59:50.55+00:00

Is there any way to exclude few resource groups from subscription level lock in azure .

I have an azure donotdelete lock scoped at subscription level i want to exclude few resourcegroups from it in azure . I do not find any direct way for it other than applying lock at resource group level. Is there any better way to implement the same.

Azure Backup
Azure Backup
An Azure backup service that provides built-in management at scale.
1,149 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
809 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,223 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andreas Baumgarten 98,876 Reputation points MVP
    2021-02-15T08:00:56.6+00:00

    Hi @Abhishek Singh ,

    it's not possible to block the inheritance of locks in Azure.
    You need to remove the lock at subscription level and add the lock on resource group level.

    There is a feedback at Azure Feedback. You can vote for this feature request if you like:
    https://feedback.azure.com/forums/281804-azure-resource-manager/suggestions/34383535-ability-to-disable-lock-inheritance

    ----------

    (If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

    Regards
    Andreas Baumgarten

    2 people found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful