Even a subscription Owner cannot delete a locked production vault until the lock is removed. What fundamentals idea about resource locks does that illustrate?
Select an answer to reveal the explanation.
Short Explanation
Locks sit above the usual permission story. Even Owner has to take the lock off before a protected delete goes through. That is the point—accidental heroics still get stopped.
Full Explanation
Resource locks apply restrictions that affect all callers, including users with Owner on the scope; privileged users must remove or change the lock before performing a blocked action such as delete. Locks are not limited to guest accounts and do not permanently rewrite role assignments. AZ-900 emphasizes this override behavior as accidental-change protection.