last sync: 2023-Jun-19 17:45:01 UTC

Community Policy definition

Deploy CanNotDelete Resource Lock on Resource Groups

Name Deploy CanNotDelete Resource Lock on Resource Groups
Community-Policy GitHub
Id 0b4a796b-43ce-43cf-84ae-b0fed1e005f6
Version 1.0.0
details on versioning
Category Regulatory Compliance
Microsoft docs
Description Creates a resource lock at the resource group level for preventing resource deletion.
Mode All
Type Custom Community
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
Used RBAC Role
Role Name Role Id
User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9
Rule Aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Authorization/locks/level Microsoft.Authorization locks properties.level false
Rule ResourceTypes IF (1)
Microsoft.Resources/subscriptions/resourceGroups
THEN-Deployment (1)
Microsoft.Authorization/locks
JSON