O'Reilly logo
  • Angelie Soto thinks this is interesting:

If a lock is scoped at the resource group level, it applies to all resources in the resource group for which the lock has been applied. Resources in the resource group inherit the resource group lock. If a resource is added to a resource group where resource group lock of CanNotDelete is already present, that new resource inherits the CanNotDelete lock.

From

Cover of Exam Ref 70-533 Implementing Microsoft Azure Infrastructure Solutions

Note

The cannot delete has precedence over any other.