You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/governance/blueprints/concepts/resource-locking.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,15 +21,15 @@ see an example of resource locking and application of _deny assignments_, see th
21
21
Locking Mode applies to the blueprint assignment and it has three options: **Don't Lock**, **Read
22
22
Only**, or **Do Not Delete**. The locking mode is configured during artifact deployment during a
23
23
blueprint assignment. A different locking mode can be set by updating the blueprint assignment.
24
-
Locking modes, however, can't be changed outside of Blueprints.
24
+
Locking modes, however, can't be changed outside of Azure Blueprints.
25
25
26
26
Resources created by artifacts in a blueprint assignment have four states: **Not Locked**, **Read
27
27
Only**, **Cannot Edit / Delete**, or **Cannot Delete**. Each artifact type can be in the **Not
28
28
Locked** state. The following table can be used to determine the state of a resource:
29
29
30
30
|Mode|Artifact Resource Type|State|Description|
31
31
|-|-|-|-|
32
-
|Don't Lock|*|Not Locked|Resources aren't protected by Blueprints. This state is also used for resources added to a **Read Only** or **Do Not Delete** resource group artifact from outside a blueprint assignment.|
32
+
|Don't Lock|*|Not Locked|Resources aren't protected by Azure Blueprints. This state is also used for resources added to a **Read Only** or **Do Not Delete** resource group artifact from outside a blueprint assignment.|
33
33
|Read Only|Resource group|Cannot Edit / Delete|The resource group is read only and tags on the resource group can't be modified. **Not Locked** resources can be added, moved, changed, or deleted from this resource group.|
34
34
|Read Only|Non-resource group|Read Only|The resource can't be altered in any way -- no changes and it can't be deleted.|
35
35
|Do Not Delete|*|Cannot Delete|The resources can be altered, but can't be deleted. **Not Locked** resources can be added, moved, changed, or deleted from this resource group.|
@@ -38,7 +38,7 @@ Locked** state. The following table can be used to determine the state of a reso
38
38
39
39
It's typically possible for someone with appropriate [role-based access
40
40
control](../../../role-based-access-control/overview.md) (RBAC) on the subscription, such as the
41
-
'Owner' role, to be allowed to alter or delete any resource. This access isn't the case when
41
+
'Owner' role, to be allowed to alter or delete any resource. This access isn't the case when Azure
42
42
Blueprints applies locking as part of a deployed assignment. If the assignment was set with the
43
43
**Read Only** or **Do Not Delete** option, not even the subscription owner can perform the blocked
44
44
action on the protected resource.
@@ -116,8 +116,8 @@ ways to do so.
116
116
- Updating the blueprint assignment to a locking mode of **Don't Lock**
117
117
- Delete the blueprint assignment
118
118
119
-
When the assignment is removed, the locks created by Blueprints are removed. However, the resource
120
-
is left behind and would need to be deleted through normal means.
119
+
When the assignment is removed, the locks created by Azure Blueprints are removed. However, the
120
+
resource is left behind and would need to be deleted through normal means.
121
121
122
122
## How blueprint locks work
123
123
@@ -126,7 +126,7 @@ applied to artifact resources during assignment of a blueprint if the assignment
126
126
Only** or **Do Not Delete** option. The deny action is added by the managed identity of the
127
127
blueprint assignment and can only be removed from the artifact resources by the same managed
128
128
identity. This security measure enforces the locking mechanism and prevents removing the blueprint
129
-
lock outside Blueprints.
129
+
lock outside Azure Blueprints.
130
130
131
131

0 commit comments