你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

Management Locks - Create Or Update At Resource Level

服务:

Resource Management

API 版本:

2016-09-01

在资源级别或资源以下的任何级别创建或更新管理锁。
在父范围应用锁时，所有子资源都继承相同的锁。 若要创建管理锁，必须有权访问 Microsoft.Authorization/* 或 Microsoft.Authorization/locks/*作。 在内置角色中，只有“所有者”和“用户访问管理员”有权执行这些操作。

PUT https://management.azure.com/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/locks/{lockName}?api-version=2016-09-01

URI 参数

名称	在	必需	类型	说明
lockName	path	True	string	锁的名称。 锁名称最多可以包含 260 个字符。 它不能包含 <、> %、&、：、、？、/或任何控制字符。
parentResourcePath	path	True	string	父资源标识。
resourceGroupName	path	True	string minLength: 1 maxLength: 90 pattern: ^[-\w\._\(\)]+$	包含要锁定的资源的资源组的名称。
resourceName	path	True	string	要锁定的资源的名称。
resourceProviderNamespace	path	True	string	要锁定的资源的资源提供程序命名空间。
resourceType	path	True	string	要锁定的资源的资源类型。
subscriptionId	path	True	string	目标订阅的 ID。
api-version	query	True	string	用于作的 API 版本。

请求正文

名称	必需	类型	说明
properties.level	True	LockLevel	锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除。 ReadOnly 表示授权用户只能从资源读取，但无法修改或删除它。
properties.notes		string	有关锁的说明。 最多 512 个字符。
properties.owners		ManagementLockOwner[]	锁的所有者。

响应

名称	类型	说明
200 OK	ManagementLockObject	确定 - 返回有关锁的信息。
201 Created	ManagementLockObject	创建 - 返回有关锁的信息。

安全性

azure_auth

Azure Active Directory OAuth2 Flow

类型: oauth2
流向: implicit
授权 URL: https://login.microsoftonline.com/common/oauth2/authorize

作用域

名称	说明
user_impersonation	模拟用户帐户

示例

Create management lock at resource level

示例请求

HTTP

PUT https://management.azure.com/subscriptions/subscriptionId/resourcegroups/resourcegroupname/providers/Microsoft.Storage/parentResourcePath/storageAccounts/teststorageaccount/providers/Microsoft.Authorization/locks/testlock?api-version=2016-09-01

{
  "properties": {
    "level": "ReadOnly"
  }
}

Java

import com.azure.core.util.Context;
import com.azure.resourcemanager.resources.fluent.models.ManagementLockObjectInner;
import com.azure.resourcemanager.resources.models.LockLevel;

/** Samples for ManagementLocks CreateOrUpdateAtResourceLevel. */
public final class Main {
    /*
     * x-ms-original-file: specification/resources/resource-manager/Microsoft.Authorization/stable/2016-09-01/examples/ManagementLocks_CreateOrUpdateAtResourceLevel.json
     */
    /**
     * Sample code: Create management lock at resource level.
     *
     * @param azure The entry point for accessing resource management APIs in Azure.
     */
    public static void createManagementLockAtResourceLevel(com.azure.resourcemanager.AzureResourceManager azure) {
        azure
            .genericResources()
            .manager()
            .managementLockClient()
            .getManagementLocks()
            .createOrUpdateAtResourceLevelWithResponse(
                "resourcegroupname",
                "Microsoft.Storage",
                "parentResourcePath",
                "storageAccounts",
                "teststorageaccount",
                "testlock",
                new ManagementLockObjectInner().withLevel(LockLevel.READ_ONLY),
                Context.NONE);
    }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Python

from azure.identity import DefaultAzureCredential

from azure.mgmt.resource import ManagementLockClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-resource
# USAGE
    python management_locks_create_or_update_at_resource_level.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ManagementLockClient(
        credential=DefaultAzureCredential(),
        subscription_id="subscriptionId",
    )

    response = client.management_locks.create_or_update_at_resource_level(
        resource_group_name="resourcegroupname",
        resource_provider_namespace="Microsoft.Storage",
        parent_resource_path="parentResourcePath",
        resource_type="storageAccounts",
        resource_name="teststorageaccount",
        lock_name="testlock",
        parameters={"properties": {"level": "ReadOnly"}},
    )
    print(response)


# x-ms-original-file: specification/resources/resource-manager/Microsoft.Authorization/stable/2016-09-01/examples/ManagementLocks_CreateOrUpdateAtResourceLevel.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

JavaScript

const { ManagementLockClient } = require("@azure/arm-locks-profile-2020-09-01-hybrid");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to When you apply a lock at a parent scope, all child resources inherit the same lock. To create management locks, you must have access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Of the built-in roles, only Owner and User Access Administrator are granted those actions.
 *
 * @summary When you apply a lock at a parent scope, all child resources inherit the same lock. To create management locks, you must have access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Of the built-in roles, only Owner and User Access Administrator are granted those actions.
 * x-ms-original-file: specification/resources/resource-manager/Microsoft.Authorization/stable/2016-09-01/examples/ManagementLocks_CreateOrUpdateAtResourceLevel.json
 */
async function createManagementLockAtResourceLevel() {
  const subscriptionId = process.env["LOCKS_SUBSCRIPTION_ID"] || "subscriptionId";
  const resourceGroupName = process.env["LOCKS_RESOURCE_GROUP"] || "resourcegroupname";
  const resourceProviderNamespace = "Microsoft.Storage";
  const parentResourcePath = "parentResourcePath";
  const resourceType = "storageAccounts";
  const resourceName = "teststorageaccount";
  const lockName = "testlock";
  const parameters = { level: "ReadOnly" };
  const credential = new DefaultAzureCredential();
  const client = new ManagementLockClient(credential, subscriptionId);
  const result = await client.managementLocks.createOrUpdateAtResourceLevel(
    resourceGroupName,
    resourceProviderNamespace,
    parentResourcePath,
    resourceType,
    resourceName,
    lockName,
    parameters
  );
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

示例响应

状态代码:

201

{
  "properties": {
    "level": "ReadOnly"
  },
  "id": "/providers/Microsoft.Authorization/locks/testlock",
  "type": "Microsoft.Authorization/locks",
  "name": "testlock"
}

状态代码:

200

{
  "properties": {
    "level": "ReadOnly"
  },
  "id": "/providers/Microsoft.Authorization/locks/testlock",
  "type": "Microsoft.Authorization/locks",
  "name": "testlock"
}

定义

名称	说明
LockLevel	锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除。 ReadOnly 表示授权用户只能从资源读取，但无法修改或删除它。
ManagementLockObject	锁信息。
ManagementLockOwner	锁定所有者属性。

LockLevel

枚举

锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除。 ReadOnly 表示授权用户只能从资源读取，但无法修改或删除它。

值	说明
CanNotDelete
NotSpecified
ReadOnly

ManagementLockObject

Object

锁信息。

名称	类型	说明
id	string	锁的资源 ID。
name	string	锁的名称。
properties.level	LockLevel	锁的级别。 可能的值为：NotSpecified、CanNotDelete、ReadOnly。 CanNotDelete 表示授权用户能够读取和修改资源，但不能删除。 ReadOnly 表示授权用户只能从资源读取，但无法修改或删除它。
properties.notes	string	有关锁的说明。 最多 512 个字符。
properties.owners	ManagementLockOwner[]	锁的所有者。
type	string	锁的资源类型 - Microsoft.Authorization/locks。

ManagementLockOwner

Object

锁定所有者属性。

名称	类型	说明
applicationId	string	锁所有者的应用程序 ID。