Disallow creating delete locks in the manged resource groups by Databricks in order to prevent delete deadlock.
If a delete lock is added to the managed resource group of Databricks:
- neither the Databricks workspace can be deleted because of that delete lock,
- nor the lock can be removed because of the "deny assignment" added by Databricks.
So it ends up in a delete deadlock state.
I suggest that deletion locks within a managed resource group are ignored when the managed app managing it is deleted. Deletion of the managed app should be governed by rules outside the managed resource group.