Microsoft.Authorization locks

• Latest
• 2020-05-01
• 2017-04-01
• 2016-09-01
• 2015-01-01

Bicep resource definition

The locks resource type can be deployed with operations that target:

• Tenant - See tenant deployment commands* Management groups - See management group deployment commands* Subscription - See subscription deployment commands* Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Authorization/locks resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.Authorization/locks@2020-05-01' = {
 scope: resourceSymbolicName or scope
 name: 'string'
 properties: {
 level: 'string'
 notes: 'string'
 owners: [
 {
 applicationId: 'string'
 }
 ]
 }
}

Property Values

Microsoft.Authorization/locks

ManagementLockOwner

ManagementLockProperties

Usage Examples

Bicep Samples

A basic example of deploying Management Lock which is scoped to a Subscription, Resource Group or Resource.

param resourceName string = 'acctest0001'
param location string = 'westeurope'

resource publicIPAddress 'Microsoft.Network/publicIPAddresses@2022-07-01' = {
 name: resourceName
 location: location
 sku: {
 name: 'Basic'
 tier: 'Regional'
 }
 properties: {
 ddosSettings: {
 protectionMode: 'VirtualNetworkInherited'
 }
 idleTimeoutInMinutes: 30
 publicIPAddressVersion: 'IPv4'
 publicIPAllocationMethod: 'Static'
 }
}

resource lock 'Microsoft.Authorization/locks@2020-05-01' = {
 name: resourceName
 scope: publicIPAddress
 properties: {
 level: 'CanNotDelete'
 notes: ''
 }
}

Azure Quickstart Samples

The following Azure Quickstart templates contain Bicep samples for deploying this resource type.

ARM template resource definition

The locks resource type can be deployed with operations that target:

• Tenant - See tenant deployment commands* Management groups - See management group deployment commands* Subscription - See subscription deployment commands* Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Authorization/locks resource, add the following JSON to your template.

{
 "type": "Microsoft.Authorization/locks",
 "apiVersion": "2020-05-01",
 "name": "string",
 "properties": {
 "level": "string",
 "notes": "string",
 "owners": [
 {
 "applicationId": "string"
 }
 ]
 }
}

Property Values

Microsoft.Authorization/locks

ManagementLockOwner

ManagementLockProperties

Usage Examples

Azure Quickstart Templates

The following Azure Quickstart templates deploy this resource type.

Terraform (AzAPI provider) resource definition

The locks resource type can be deployed with operations that target:

• Tenant* Management groups* Subscription* Resource groups

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Authorization/locks resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
 type = "Microsoft.Authorization/locks@2020-05-01"
 name = "string"
 parent_id = "string"
 body = {
 properties = {
 level = "string"
 notes = "string"
 owners = [
 {
 applicationId = "string"
 }
 ]
 }
 }
}

Property Values

Microsoft.Authorization/locks

ManagementLockOwner

ManagementLockProperties

Usage Examples

Terraform Samples

A basic example of deploying Management Lock which is scoped to a Subscription, Resource Group or Resource.

terraform {
 required_providers {
 azapi = {
 source = "Azure/azapi"
 }
 }
}

provider "azapi" {
 skip_provider_registration = false
}

variable "resource_name" {
 type = string
 default = "acctest0001"
}

variable "location" {
 type = string
 default = "westeurope"
}

resource "azapi_resource" "resourceGroup" {
 type = "Microsoft.Resources/resourceGroups@2020-06-01"
 name = var.resource_name
 location = var.location
}

resource "azapi_resource" "publicIPAddress" {
 type = "Microsoft.Network/publicIPAddresses@2022-07-01"
 parent_id = azapi_resource.resourceGroup.id
 name = var.resource_name
 location = var.location
 body = {
 properties = {
 ddosSettings = {
 protectionMode = "VirtualNetworkInherited"
 }
 idleTimeoutInMinutes = 30
 publicIPAddressVersion = "IPv4"
 publicIPAllocationMethod = "Static"
 }
 sku = {
 name = "Basic"
 tier = "Regional"
 }
 }
 schema_validation_enabled = false
 response_export_values = ["*"]
}

resource "azapi_resource" "lock" {
 type = "Microsoft.Authorization/locks@2020-05-01"
 parent_id = azapi_resource.publicIPAddress.id
 name = var.resource_name
 body = {
 properties = {
 level = "CanNotDelete"
 notes = ""
 }
 }
 schema_validation_enabled = false
 response_export_values = ["*"]
}