Microsoft Azure: Avoid unknown or accidental deletion of Azure resources
Azure has role-based access control (RBAC) to restrict access to resources and management features, but it can’t be used to quickly prevent the users from accidentally deleting a resource.
One of my friends called and asked How to avoid unknown or accidental deletion of Azure resources by other users, In this article, will share the steps, Azure resource lock implementation, Which Prevents Accidental Deletion of Resources.
Type Azure Lock
Microsoft provided two types of azure resource lockCannotDelete
Lock prevents users from deleting a storage account, but permits reading and modifying its configuration.
ReadOnly
Lock prevents users from deleting a storage account or modifying its configuration but permits reading the configuration.
User role Administrator and owner can modify the above two azure lock features.
User role Administrator and owner can modify the above two azure lock features.
Configure Azure Lock
We will see the following steps for how to configure azure lock using the Azure portal.Step 1: Navigate to your storage account, or if you have not created it before, I have shared steps in my previous article about how to create an Azure storage account.
Step 2: On Storage account quick setting menu and Select on Lock, the lock list showing empty means, they are is no lock available on existing so click on Add for new lock configuration
Create new Lock
As mentioned above, Resource lock has two types, so select the Lock type as per your need and provide the lock name and description for understanding.After clicking on Ok, You will get the following list screen with Lock Name, type, and Edit. Edit Options for Edit the name and type, delete option for deleting the lock associated with a storage account.
Resource Lock testing
You can navigate to Storage account and click on DeleteAfter clicking on the delete option, Immediately Azure intelligent will show the notification saying you can’t delete because of the Resource lock
0 Comments