Recap
Know what locks block, where they apply, and how they relate to Azure RBAC and control vs data actions. Pick lock type: CanNotDelete vs ReadOnly. Apply at correct scope; remember inheritance. Azure RBAC (permissions) plus locks (block actions). Control plane blocked; data plane may still work.

