Is is possible to allow user to modify/delete only specified management (resource) locks?

New Contributor

Greetings everyone,

as in the title, is it possible to do such action? If yes, then what permissions does this user need to do so?



I have a resource group with 2 resource objects. Both of them have set up management locks. Now, is it possible to allow someone to modify/delete lock only on first object? 


Thank you in advance!

2 Replies
Problem solved.

For everyone out there wondering, I have created custom role which applied only to specified scope of resources. Then added those role in IAM -> Add role assignment of a given resource (i.e storage account) and it works.

Of course you need to add the role to a user so he can access only those resources specified by the role.

best response confirmed by Azure_Guy1559 (New Contributor)
Or simply add new member to the resource in IAM -> Add role assignment -> members tab.