# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Microsoft Azure ManagementLockClient Management Locks API
  version: 1.0.0
extends: openapi/microsoft-azure-managementlocks-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 16
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/locks/{lockName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a lock on a resource group
      effect: read
      questions:
      - What does a specific management lock on my resource group look like, read-only or can-not-delete?
      - Can I look up one resource group lock by its name?
      instructions:
      - text: Get lock {lock} on resource group {group} in subscription {subscription}.
        slots:
          lock: path.lockName
          group: path.resourceGroupName
          subscription: path.subscriptionId
      - text: Show the level and notes of resource group lock {lock} on {group}.
        slots:
          lock: path.lockName
          group: path.resourceGroupName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/locks/{lockName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Lock a resource group against changes or deletion
      effect: write
      questions:
      - How do I stop anyone from deleting a whole resource group in Azure?
      - Do resources inside a resource group inherit a lock I place on the group?
      - Which built-in roles are allowed to create a management lock on a resource group?
      instructions:
      - text: Create lock {lock} on resource group {group} in subscription {subscription} with settings {properties}.
        slots:
          lock: path.lockName
          group: path.resourceGroupName
          subscription: path.subscriptionId
          properties: requestBody.properties
      - text: Make resource group {group} read-only by adding lock {lock}.
        slots:
          group: path.resourceGroupName
          lock: path.lockName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/locks/{lockName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a lock from a resource group
      effect: destructive
      questions:
      - Can I remove the delete protection from a resource group?
      - Who is permitted to delete a resource group management lock?
      instructions:
      - text: Delete lock {lock} from resource group {group} in subscription {subscription}.
        slots:
          lock: path.lockName
          group: path.resourceGroupName
          subscription: path.subscriptionId
      - text: Unlock resource group {group} by removing {lock}.
        slots:
          group: path.resourceGroupName
          lock: path.lockName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Authorization/locks/{lockName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a lock at any scope
      effect: read
      questions:
      - Can I fetch a lock using a full scope path instead of naming the subscription and group separately?
      - What lock is set at a given Azure scope under a particular name?
      instructions:
      - text: Get the lock named {lock} at scope {scope}.
        slots:
          lock: path.lockName
          scope: path.scope
      - text: Read the lock {lock} applied at the scope path {scope}.
        slots:
          lock: path.lockName
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Authorization/locks/{lockName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update a lock at any scope
      effect: write
      questions:
      - Can I place a lock on any scope by passing its full resource path?
      - What goes in the properties when I set a lock by scope?
      instructions:
      - text: Put lock {lock} at scope {scope} with properties {properties}.
        slots:
          lock: path.lockName
          scope: path.scope
          properties: requestBody.properties
      - text: Change the level of the existing lock {lock} at scope path {scope}.
        slots:
          lock: path.lockName
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Authorization/locks/{lockName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a lock at any scope
      effect: destructive
      questions:
      - Can I delete a lock by its scope path without knowing which level it sits at?
      - What removes a lock identified by scope and name?
      instructions:
      - text: Delete the lock {lock} at scope {scope}.
        slots:
          lock: path.lockName
          scope: path.scope
      - text: Remove whatever lock is called {lock} on the scope path {scope}.
        slots:
          lock: path.lockName
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/locks/{lockName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a lock on a specific resource
      effect: read
      questions:
      - What lock is protecting a single resource such as one storage account or VM?
      - Can I read a lock set on a resource or on something nested below it?
      instructions:
      - text: Get lock {lock} on {type} {resource} (parent {parent}, namespace {namespace}) in group {group}, subscription {subscription}.
        slots:
          lock: path.lockName
          type: path.resourceType
          resource: path.resourceName
          parent: path.parentResourcePath
          namespace: path.resourceProviderNamespace
          group: path.resourceGroupName
          subscription: path.subscriptionId
      - text: Show the resource-level lock {lock} on {resource} in resource group {group}.
        slots:
          lock: path.lockName
          resource: path.resourceName
          group: path.resourceGroupName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/locks/{lockName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Lock a specific resource
      effect: write
      questions:
      - How can I protect one individual resource from accidental deletion?
      - Do child resources inherit a lock I put on a single parent resource?
      instructions:
      - text: 'Lock {type} {resource} as {lock} (parent {parent}, namespace {namespace}) in group {group}, sub {subscription}: {properties}.'
        slots:
          type: path.resourceType
          resource: path.resourceName
          lock: path.lockName
          parent: path.parentResourcePath
          namespace: path.resourceProviderNamespace
          group: path.resourceGroupName
          subscription: path.subscriptionId
          properties: requestBody.properties
      - text: Add a can-not-delete lock {lock} to resource {resource} in group {group}.
        slots:
          lock: path.lockName
          resource: path.resourceName
          group: path.resourceGroupName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/locks/{lockName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a lock from a specific resource
      effect: destructive
      questions:
      - Can I take a lock off one resource while leaving group-level locks alone?
      - Why can't I remove a lock from a single resource without Owner or User Access Administrator?
      instructions:
      - text: Delete lock {lock} from {type} {resource} (parent {parent}, namespace {namespace}) in group {group}, sub {subscription}.
        slots:
          lock: path.lockName
          type: path.resourceType
          resource: path.resourceName
          parent: path.parentResourcePath
          namespace: path.resourceProviderNamespace
          group: path.resourceGroupName
          subscription: path.subscriptionId
      - text: Unlock the individual resource {resource} by removing lock {lock}.
        slots:
          resource: path.resourceName
          lock: path.lockName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/locks/{lockName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a subscription-wide lock
      effect: read
      questions:
      - Is there a lock applied across my whole Azure subscription, and what does it say?
      - Can I read one subscription-level lock by name?
      instructions:
      - text: Get the subscription-level lock {lock} in subscription {subscription}.
        slots:
          lock: path.lockName
          subscription: path.subscriptionId
      - text: Show details of subscription lock {lock}.
        slots:
          lock: path.lockName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/locks/{lockName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Lock an entire subscription
      effect: write
      questions:
      - How do I make every resource in a subscription read-only with one lock?
      - Will a subscription-level lock apply to all resource groups under it?
      instructions:
      - text: Create subscription-wide lock {lock} on subscription {subscription} with properties {properties}.
        slots:
          lock: path.lockName
          subscription: path.subscriptionId
          properties: requestBody.properties
      - text: Protect everything in subscription {subscription} from deletion using lock {lock}.
        slots:
          subscription: path.subscriptionId
          lock: path.lockName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/locks/{lockName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a subscription-wide lock
      effect: destructive
      questions:
      - Can I lift a lock that covers my entire subscription?
      - What permissions do I need to delete a subscription-level lock?
      instructions:
      - text: Delete subscription-level lock {lock} from subscription {subscription}.
        slots:
          lock: path.lockName
          subscription: path.subscriptionId
      - text: Lift the subscription-wide lock {lock}.
        slots:
          lock: path.lockName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/locks'].get
  update:
    x-apievangelist-phrasing:
      intent: List all locks on a resource group
      effect: read
      questions:
      - Which management locks are currently set on my resource group?
      - Can I filter the locks on a resource group?
      instructions:
      - text: List every lock on resource group {group} in subscription {subscription}.
        slots:
          group: path.resourceGroupName
          subscription: path.subscriptionId
      - text: Show resource group {group} locks matching filter {filter}.
        slots:
          group: path.resourceGroupName
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/locks'].get
  update:
    x-apievangelist-phrasing:
      intent: List all locks on a specific resource
      effect: read
      questions:
      - What locks apply to one resource and the things nested under it?
      - Why can't I delete this resource, is something locking it?
      instructions:
      - text: List locks on {type} {resource} (parent {parent}, namespace {namespace}) in group {group}, subscription {subscription}.
        slots:
          type: path.resourceType
          resource: path.resourceName
          parent: path.parentResourcePath
          namespace: path.resourceProviderNamespace
          group: path.resourceGroupName
          subscription: path.subscriptionId
      - text: Find all locks blocking changes to resource {resource} in group {group}.
        slots:
          resource: path.resourceName
          group: path.resourceGroupName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/locks'].get
  update:
    x-apievangelist-phrasing:
      intent: List all locks in a subscription
      effect: read
      questions:
      - What management locks exist anywhere in my subscription?
      - Can I get an inventory of every lock across my Azure subscription?
      instructions:
      - text: List all management locks in subscription {subscription}.
        slots:
          subscription: path.subscriptionId
      - text: Inventory subscription {subscription} locks that match {filter}.
        slots:
          subscription: path.subscriptionId
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Authorization/locks'].get
  update:
    x-apievangelist-phrasing:
      intent: List locks at any scope
      effect: read
      questions:
      - Can I list the locks for an arbitrary scope path like a management group or resource?
      - Which locks sit at a scope I give as a full resource path?
      instructions:
      - text: List the locks at scope {scope}.
        slots:
          scope: path.scope
      - text: Enumerate locks under the scope path {scope} filtered by {filter}.
        slots:
          scope: path.scope
          filter: query.$filter
      method: generated
      generated: '2026-09-26'