Noos
PT EN
RAN-AZ900-00246
Ranvier · AZ900

Exam AZ900 Topics: management Difficulty: medium

At a mining company, a subscription Owner with full Azure RBAC permissions tries to delete a storage account that has a CanNotDelete lock, and the operation fails. A colleague insists the lock must be misconfigured, because Owner permissions should override it. Which explanation is correct?

Options (Reading Mode) Click to filter discussion →
  1. A. The lock is misconfigured, because Owner permissions always take precedence over resource locks
  2. B. The storage account is being blocked by Azure Policy, so the Owner needs a policy exemption
  3. C. Owners can delete locked resources from PowerShell or the Azure CLI, just not from the portal
  4. D. Resource locks apply regardless of RBAC permissions — even an Owner must remove the lock before deleting
Reveal answer

Correct answer: Resource locks apply regardless of RBAC permissions — even an Owner must remove the lock before deleting

Reference: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/4-describe-purpose-resource-locks

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (D): Resource locks apply regardless of RBAC permissions — even an Owner must remove the lock before deleting

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.