What is resource locking in Azure Blueprints?

Resource locks allow you to lock resources and prevent the users from changing them.

Resource locks deployed by Azure Blueprints are only applied to resources deployed by the blueprint assignment. Existing resources, such as those in resource groups that already exist, don't have locks added to them.

Resources created by artifacts in a blueprint assignment have four states:

• Not Locked,
• Read Only,
• Cannot Edit / Delete
• Cannot Delete.

Each artifact type can be in the Not Locked state. The following table can be used to determine the state of a resource:

Don't Lock

Not Locked - Resources aren't protected by Azure Blueprints. This state is also used for resources added to a Read Only or Do Not Delete resource group artifact from outside a blueprint assignment.

Read Only (Resource group)

Cannot Edit / Delete - The resource group is read only and tags on the resource group can't be modified. Not Locked resources can be added, moved, changed, or deleted from this resource group.

Read Only (Non-resource group)

Read Only - The resource can't be altered in any way. No changes and it can't be deleted.

Do Not Delete

Cannot Delete - The resources can be altered, but can't be deleted. Not Locked resources can be added, moved, changed, or deleted from this resource group.