Ensures that a custom role is assigned permissions for administering resource locks.
Resource locks prevent inadvertent modification or deletion of resources. Managing locks requires the Microsoft.Authorization/locks permission, which is otherwise only available through broad roles such as Owner or User Access Administrator. Creating a custom role limited to lock administration follows the principle of least privilege.
Create a custom role granting the Microsoft.Authorization/locks permission and assign it to the members responsible for administering resource locks.