Azure resource locks: purpose, types, scope, and how they relate to RBAC

Lock scope and inheritance

Locks apply at subscription/resource group/resource, and inherited locks can be more restrictive. Scopes: Subscription to Resource group to Resource. Locks are inherited down the hierarchy. Most restrictive lock in the chain wins. 'Can't delete?' Check higher scopes too.