I have prod subscription where deploying pipeline fails because of permission missing.
My Azure AD user have no permission to create or remove locks of Azure SQL.

I wonder what and how to configure user permission so that Azure Pipeline can create, edit or remove resource locks?

TERRAFORM:

```
resource "azurerm_management_lock" "hellodb_lck" {
  for_each = var.databases
  name       = "can-not-delete"
  scope      = azurerm_sql_database.hellodb[each.key].id
  lock_level = "CanNotDelete"
}

```