'Creates or updates a management lock at the subscription level.
When you apply a lock at a parent scope, all child resources inherit
the same lock. To create management locks, you must have access to
Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions.
Of the built-in roles, only Owner and User Access Administrator are
granted those actions.
:param lock_name: The name of lock. The lock name can be a maximum of
260 characters. It cannot contain <, > %, &, :, \, ?, /, or any
control characters.
:type lock_name: str
:param parameters: The management lock parameters.
:type parameters: :class:`ManagementLockObject
<azure.mgmt.resource.locks.v2016_09_01.models.ManagementLockObject>`
:param dict custom_headers: headers that will be added to the request
:param bool raw: returns the direct response alongside the
deserialized response
:param operation_config: :ref:`Operation configuration
overrides<msrest:optionsforoperations>`.
:rtype: :class:`ManagementLockObject
<azure.mgmt.resource.locks.v2016_09_01.models.ManagementLockObject>`
:rtype: :class:`ClientRawResponse<msrest.pipeline.ClientRawResponse>`
if raw=true
:raises: :class:`CloudError<msrestazure.azure_exceptions.CloudError>`'

def create_or_update_at_subscription_level(self, lock_name, parameters, custom_headers=None, raw=False, **operation_config):

    url = '/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/locks/{lockName}'
    path_format_arguments = {'lockName': self._serialize.url('lock_name', lock_name, 'str'), 'subscriptionId': self._serialize.url('self.config.subscription_id', self.config.subscription_id, 'str')}
    url = self._client.format_url(url, **path_format_arguments)
    query_parameters = {}
    query_parameters['api-version'] = self._serialize.query('self.api_version', self.api_version, 'str')
    header_parameters = {}
    header_parameters['Content-Type'] = 'application/json;    charset=utf-8'
    if self.config.generate_client_request_id:
        header_parameters['x-ms-client-request-id'] = str(uuid.uuid1())
    if custom_headers:
        header_parameters.update(custom_headers)
    if (self.config.accept_language is not None):
        header_parameters['accept-language'] = self._serialize.header('self.config.accept_language', self.config.accept_language, 'str')
    body_content = self._serialize.body(parameters, 'ManagementLockObject')
    request = self._client.put(url, query_parameters)
    response = self._client.send(request, header_parameters, body_content, **operation_config)
    if (response.status_code not in [201, 200]):
        exp = CloudError(response)
        exp.request_id = response.headers.get('x-ms-request-id')
        raise exp
    deserialized = None
    if (response.status_code == 201):
        deserialized = self._deserialize('ManagementLockObject', response)
    if (response.status_code == 200):
        deserialized = self._deserialize('ManagementLockObject', response)
    if raw:
        client_raw_response = ClientRawResponse(deserialized, response)
        return client_raw_response
    return deserialized
