Locked roles:

• Cannot be assigned to users that don’t already have it assigned.
• Are not listed in the Member Roles drop-down when you are adding a user to a cluster or project.

Roles can be locked by the following users:

• Any user assigned the global permission.
• Any user assigned the Custom Users permission, along with the role.

You can lock roles in two contexts:

• When you editing an existing role (see below).

1. From the Global view, select Security > Roles.

2. From the Locked option, choose the Yes or No radio button. Then click Save.