Azure resource locks: purpose, types, scope, and how they relate to RBAC

Recap

Know what locks block, where they apply, and how they relate to Azure RBAC and control vs data actions. Pick lock type: CanNotDelete vs ReadOnly. Apply at correct scope; remember inheritance. Azure RBAC (permissions) plus locks (block actions). Control plane blocked; data plane may still work.