Lock Inheritance and Precedence

A core principle is lock inheritance: a lock applied at a parent scope (like a subscription) automatically flows down to all child resources within that scope. This inheritance is dynamic and applies to resources added after the lock is created. When multiple locks exist at different levels, the system enforces the most restrictive lock in the chain. This means a single ReadOnly lock on a child resource can override a less restrictive CanNotDelete lock on its parent, and a locked resource can prevent the deletion of its entire parent resource group.