AzPolicyAdvertizer

last sync: 2025-Oct-23 17:23:10 UTC

Deploy CanNotDelete Resource Lock on Resource Groups

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy 0bdc4336-fd4c-4798-b524-a2ecbeed9d0c (1.0.0) to Azure
Display name Deploy CanNotDelete Resource Lock on Resource Groups
Id 0bdc4336-fd4c-4798-b524-a2ecbeed9d0c
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Creates a resource lock at the resource group level for preventing resource deletion.
Mode All
Type Custom Community
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Locks Contributor 28bf596f-4eb7-45ce-b5bc-6cf482fec137
Rule aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Authorization/locks/level Microsoft.Authorization locks properties.level True False
Rule resource types IF (1)
Microsoft.Resources/subscriptions/resourceGroups
THEN-Deployment (1)
Microsoft.Authorization/locks
JSON
EPAC
Deploy policy 0bdc4336-fd4c-4798-b524-a2ecbeed9d0c (1.0.0) to Azure