Overriding a Snapshot Lock
Override the lock for a File Storage snapshot when performing an action such as an update, move, or deletion.
Required IAM Policy
To override locks, in addition to permissions to manage the snapshot, you need permissions to manage locks.
To update or delete a snapshot with a full lock, you must have RESOURCE_LOCK_REMOVE
and RESOURCE_LOCK_ADD
permissions.
To move a snapshot with a full lock, you must have RESOURCE_LOCK_REMOVE
permission in the source compartment and RESOURCE_LOCK_ADD
in the target compartment. If the lock was created by a service, RESOURCE_LOCK_REMOVE
and RESOURCE_LOCK_ADD
permissions in the compartment of the lock.
You can't use the Console to override a File Storage resource lock. Remove the lock, or use the CLI or API.
Include the required
--is-lock-override
parameter with the command to override the lock on a snapshot. For example:oci fs snapshot update --snapshot-id <snapshot_OCID>
--is-lock-override
true [OPTIONS]For more information and examples, see Managing Snapshots.
For a complete list of parameters and values for CLI commands, see the CLI Command Reference.
Include the required
isLockOverride
parameter astrue
with the operation to override the lock on a snapshot.For more information and examples, see Managing Snapshots.
For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.