Search code examples
azurerole-based-access-controlazure-role-environmentazure-resource-lock

Azure resource deletion locks preventing deletion of role assignment on the resource


I have applied deletion lock on my subscription level so that all the resource will get the locks, while revoked the access from virtual machines, azure deletion lock is preventing the IAM role deletion, Is there any way to fix it?


Solution

  • the only way to fix it - remove the lock, delete the assignment, reestablish the lock. Assignment is really just another resource in the ARM model. nothing you can do about it.