To create or delete management locks, you need access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Only the Owner and the User Access Administrator built- in roles can create and delete management locks. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock- resources?tabs=json#who-can-create-or-delete-locks