All certifications / SC-500 / Lessons
Microsoft Certified: Cloud and AI Security Engineer Associate (replaces Azure Security Engineer Associate / AZ-500) SC-500 · Domain 1: Manage identity, access, and governance
Resource locks (CanNotDelete, ReadOnly), management group hierarchy and governance at scale
▶ Watch the overview video
Last reviewed September 25, 2026 · Leer en español
Mistakes happen: someone deletes the wrong resource group, or a script removes a production database. Resource locks protect against accidental changes regardless of the user's Azure RBAC permissions. They can be applied at the subscription, resource group or resource level and are inherited by child resources.
Free accountKeep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.
Sign up free Log in
Study SC-500 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SC-500 study plan