Locks vs Azure RBAC
Azure RBAC controls permissions; locks can still block specific management actions even when permissions allow them. Azure role-based access control (Azure RBAC): who can do what. Locks: block delete/update even if RBAC allows it. Useful as a temporary 'safety catch'. Not a replacement for good role design.

