Register to Better Coder! It's free.
Enjoy the premium features and succeed at every job interview.
How can you create a resource in such a way so that a user with RBAC Owner role cannot delete it?
Experience Level: Senior
Tags: Azure BlueprintsAzure Cloud
Answer
Use Azure Blueprint, resource locking feature.
Using Azure Blueprins you can create resources in subscription automatically. Thanks to resource locking you can make the resource locked so that Owner cannot delete it.
You can set the following states using resource locking:
- Not Locked,
- Read Only,
- Cannot Edit / Delete
- Cannot Delete.
Related Azure Cloud job interview questions
How can you allow an app to read and modify access reviews in Azure?
Azure Active DirectoryAzure CloudAzure Privileged Identity Management SeniorYou have two different Azure tenants. Users of the tenant1 use an Azure web app that resides in the subscription under the tenant1. The app uses Microsoft Identity platform to handle user authentication and users from the tenant1 can successfuly authenticate. How do you allow users from the tenant2 authenticate and use the web app as well?
Azure Active DirectoryAzure Cloud SeniorIn your hybrid environment with Azure Active Directory and on-premisees Active Directory Domain Services, you would like users to be automatically signed in to cloud apps when they access the apps on their corporate desktops that are connected to the corporate network. How do you achieve this?
Azure Active DirectoryAzure Cloud SeniorWhen would you recommend to use Append effect and when Modify effect in Azure Policy?
Azure CloudAzure PolicyAzure Resource Manager SeniorWhen using Azure Active Directory hybrid identity solution, how can you make sure that users can authenticate even if internet connection to on-premises Active Directory is unavailable?
Azure Active DirectoryAzure Cloud Senior
