How can an organization prevent users from accidentally deleting production resources?

Azure Resource Locks prevent accidental deletion or modification of critical resources. You can apply 'CanNotDelete' or 'ReadOnly' locks at various scopes (subscription, resource group, or individual resource). 'CanNotDelete' prevents deletion, while 'ReadOnly' prevents any modification or deletion. Azure Role-Based Access Control (RBAC) manages who has what permissions, but it doesn't prevent authorized users from making mistakes. Azure Policy enforces organizational standards and evaluates compliance, but it doesn't directly prevent accidental actions on existing resources. Azure Key Vault securely stores secrets and keys, which is unrelated to preventing accidental resource deletion.