Overriding a Snapshot Lock

Override the lock for a File Storage snapshot when performing an action such as an update, move, or deletion.

Required IAM Policy

To override locks, in addition to permissions to manage the snapshot, you need permissions to manage locks.

To update or delete a snapshot with a full lock, you must have RESOURCE_LOCK_REMOVE and RESOURCE_LOCK_ADD permissions.

To move a snapshot with a full lock, you must have RESOURCE_LOCK_REMOVE permission in the source compartment and RESOURCE_LOCK_ADD in the target compartment. If the lock was created by a service, RESOURCE_LOCK_REMOVE and RESOURCE_LOCK_ADD permissions in the compartment of the lock.

  • You can't use the Console to override a File Storage resource lock. Remove the lock, or use the CLI or API.

  • Include the required --is-lock-override parameter with the command to override the lock on a snapshot. For example:

    oci fs snapshot update --snapshot-id <snapshot_OCID> --is-lock-override true [OPTIONS]

    For more information and examples, see Managing Snapshots.

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Include the required isLockOverride parameter as true with the operation to override the lock on a snapshot.

    For more information and examples, see Managing Snapshots.

    For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.