AzPolicyAdvertizer

last sync: 2024-Apr-26 17:46:54 UTC

Deploy CanNotDelete Resource Lock on Resource Groups

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Display name Deploy CanNotDelete Resource Lock on Resource Groups
Id 0bdc4336-fd4c-4798-b524-a2ecbeed9d0c
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Creates a resource lock at the resource group level for preventing resource deletion.
Mode All
Type Custom Community
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
Used RBAC Role
Role Name Role Id
User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9
Rule aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Authorization/locks/level Microsoft.Authorization locks properties.level false
Rule resource types IF (1)
Microsoft.Resources/subscriptions/resourceGroups
THEN-Deployment (1)
Microsoft.Authorization/locks
JSON
EPAC