Forum Discussion
How to prevent changes to the Firewalls and virtual network section for resources?
Is it possible to prevent someone from making changes to the configuration of virtual networks settings, specifically not allowing someone to add IP addresses for access via a Policy or a custom IAM ...
Hi Jeff Walzer
Did you try locking azure resources?
More on : -
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources#who-can-create-or-delete-locks
Thx for the reply. Would locking a resource also prevent the users/groups who should have the ability makes changes, such as the security or network team?
ReadOnly Lock means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.
You can read about it in detail here --> https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources#considerations-before-applying-locks