你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

Management Locks - Create Or Update At Resource Level

Service:

Resource Management

API Version:

2016-09-01

在资源级别或资源下的任何级别创建或更新管理锁。
在父作用域应用锁时，所有子资源将继承同一个锁。 若要创建管理锁，必须有权访问 Microsoft.Authorization/* 或 Microsoft.Authorization/locks/* 操作。 在内置角色中，只有“所有者”和“用户访问管理员”有权执行这些操作。

PUT https://management.azure.com/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/locks/{lockName}?api-version=2016-09-01

URI 参数

名称	在	必需	类型	说明
lockName	path	True	string	锁的名称。 锁名称最多可以包含 260 个字符。 它不能包含 <、、 > &、、、？、/或任何控制字符。
parentResourcePath	path	True	string	父资源标识。
resourceGroupName	path	True	string	包含要锁定的资源的资源组的名称。 Regex pattern: ^[-\w\._\(\)]+$
resourceName	path	True	string	要锁定的资源的名称。
resourceProviderNamespace	path	True	string	要锁定的资源的资源提供程序命名空间。
resourceType	path	True	string	要锁定的资源的资源类型。
subscriptionId	path	True	string	目标订阅的 ID。
api-version	query	True	string	要用于操作的 API 版本。

请求正文

名称	必需	类型	说明
properties.level	True	LockLevel	锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除资源。 ReadOnly 表示授权用户只能从资源读取，但不能修改或删除资源。
properties.notes		string	有关锁的说明。 最多 512 个字符。
properties.owners		ManagementLockOwner[]	锁的所有者。

响应

名称	类型	说明
200 OK	ManagementLockObject	OK - 返回有关锁的信息。
201 Created	ManagementLockObject	Created - 返回有关锁的信息。

安全性

azure_auth

Azure Active Directory OAuth2 流

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

名称	说明
user_impersonation	模拟用户帐户

示例

Create management lock at resource level

Sample Request

HTTP

PUT https://management.azure.com/subscriptions/subscriptionId/resourcegroups/resourcegroupname/providers/Microsoft.Storage/parentResourcePath/storageAccounts/teststorageaccount/providers/Microsoft.Authorization/locks/testlock?api-version=2016-09-01

{
  "properties": {
    "level": "ReadOnly"
  }
}

Java

import com.azure.core.util.Context;
import com.azure.resourcemanager.resources.fluent.models.ManagementLockObjectInner;
import com.azure.resourcemanager.resources.models.LockLevel;

/** Samples for ManagementLocks CreateOrUpdateAtResourceLevel. */
public final class Main {
    /*
     * x-ms-original-file: specification/resources/resource-manager/Microsoft.Authorization/stable/2016-09-01/examples/ManagementLocks_CreateOrUpdateAtResourceLevel.json
     */
    /**
     * Sample code: Create management lock at resource level.
     *
     * @param azure The entry point for accessing resource management APIs in Azure.
     */
    public static void createManagementLockAtResourceLevel(com.azure.resourcemanager.AzureResourceManager azure) {
        azure
            .genericResources()
            .manager()
            .managementLockClient()
            .getManagementLocks()
            .createOrUpdateAtResourceLevelWithResponse(
                "resourcegroupname",
                "Microsoft.Storage",
                "parentResourcePath",
                "storageAccounts",
                "teststorageaccount",
                "testlock",
                new ManagementLockObjectInner().withLevel(LockLevel.READ_ONLY),
                Context.NONE);
    }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Python

from azure.identity import DefaultAzureCredential
from azure.mgmt.resource import ManagementLockClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-resource
# USAGE
    python management_locks_create_or_update_at_resource_level.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ManagementLockClient(
        credential=DefaultAzureCredential(),
        subscription_id="subscriptionId",
    )

    response = client.management_locks.create_or_update_at_resource_level(
        resource_group_name="resourcegroupname",
        resource_provider_namespace="Microsoft.Storage",
        parent_resource_path="parentResourcePath",
        resource_type="storageAccounts",
        resource_name="teststorageaccount",
        lock_name="testlock",
        parameters={"properties": {"level": "ReadOnly"}},
    )
    print(response)


# x-ms-original-file: specification/resources/resource-manager/Microsoft.Authorization/stable/2016-09-01/examples/ManagementLocks_CreateOrUpdateAtResourceLevel.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

JavaScript

const { ManagementLockClient } = require("@azure/arm-locks-profile-2020-09-01-hybrid");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to When you apply a lock at a parent scope, all child resources inherit the same lock. To create management locks, you must have access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Of the built-in roles, only Owner and User Access Administrator are granted those actions.
 *
 * @summary When you apply a lock at a parent scope, all child resources inherit the same lock. To create management locks, you must have access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Of the built-in roles, only Owner and User Access Administrator are granted those actions.
 * x-ms-original-file: specification/resources/resource-manager/Microsoft.Authorization/stable/2016-09-01/examples/ManagementLocks_CreateOrUpdateAtResourceLevel.json
 */
async function createManagementLockAtResourceLevel() {
  const subscriptionId = process.env["LOCKS_SUBSCRIPTION_ID"] || "subscriptionId";
  const resourceGroupName = process.env["LOCKS_RESOURCE_GROUP"] || "resourcegroupname";
  const resourceProviderNamespace = "Microsoft.Storage";
  const parentResourcePath = "parentResourcePath";
  const resourceType = "storageAccounts";
  const resourceName = "teststorageaccount";
  const lockName = "testlock";
  const parameters = { level: "ReadOnly" };
  const credential = new DefaultAzureCredential();
  const client = new ManagementLockClient(credential, subscriptionId);
  const result = await client.managementLocks.createOrUpdateAtResourceLevel(
    resourceGroupName,
    resourceProviderNamespace,
    parentResourcePath,
    resourceType,
    resourceName,
    lockName,
    parameters
  );
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Sample Response

Status code:

201

{
  "properties": {
    "level": "ReadOnly"
  },
  "id": "/providers/Microsoft.Authorization/locks/testlock",
  "type": "Microsoft.Authorization/locks",
  "name": "testlock"
}

Status code:

200

{
  "properties": {
    "level": "ReadOnly"
  },
  "id": "/providers/Microsoft.Authorization/locks/testlock",
  "type": "Microsoft.Authorization/locks",
  "name": "testlock"
}

定义

名称	说明
LockLevel	锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除资源。 ReadOnly 表示授权用户只能从资源读取，但不能修改或删除资源。
ManagementLockObject	锁信息。
ManagementLockOwner	锁定所有者属性。

LockLevel

锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除资源。 ReadOnly 表示授权用户只能从资源读取，但不能修改或删除资源。

名称	类型	说明
CanNotDelete	string
NotSpecified	string
ReadOnly	string

ManagementLockObject

锁信息。

名称	类型	说明
id	string	锁的资源 ID。
name	string	锁的名称。
properties.level	LockLevel	锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除资源。 ReadOnly 表示授权用户只能从资源读取，但不能修改或删除资源。
properties.notes	string	有关锁的说明。 最多 512 个字符。
properties.owners	ManagementLockOwner[]	锁的所有者。
type	string	锁的资源类型 - Microsoft.Authorization/locks。

ManagementLockOwner

锁定所有者属性。

名称	类型	说明
applicationId	string	锁所有者的应用程序 ID。