Manage Azure Data Explorer cluster locks to prevent accidental deletion in your cluster

As an administrator, you can lock your cluster to prevent accidental deletion of data. The lock overrides any user permissions set using Azure Data Explorer role-based access control.

In the Azure portal, you can set Delete or Read-only locks that prevent either deletions or modifications. The following table describes the permissions that each lock provides:

Lock level Description
Delete Authorized users can read and modify a cluster, but they can't delete it.
Read-only Authorized users can read a cluster, but they can't delete or update it. Applying this lock is similar to restricting all authorized users to the permissions that the Reader role provides.

This article describes how to lock and unlock your cluster using the Azure portal. For more information about locking Azure resources using the portal, see Lock your resources to protect your infrastructure. For information about how to lock your cluster programmatically, see Management Locks - Create Or Update At Resource Level.

Lock your cluster in the Azure portal

  1. Sign in to the Azure portal.

  2. Go to your Azure Data Explorer cluster.

  3. In the left-hand menu, under Settings, select Locks.

  4. Select Add.

  5. Give the lock a name and lock level. Optionally, you can add notes that describe the lock.

    Screenshot showing add a cluster lock to prevent accidental deletion.

Unlock your cluster in the Azure portal

To delete a lock, in the row where the lock appears, select the Delete button.

Screenshot showing delete a cluster lock.