Document ImmutabilityPolicyLockData.type behavior for Unlocked value

Addresses ARM API review feedback: explicitly document what happens when
type: 'Unlocked' is sent to the updateImmutabilityPolicyLock action.
The lock action has all privileges of updateImmutabilityPolicy, so both
Locked and Unlocked values are accepted. Updated descriptions on the
ImmutabilityPolicyLockData model, its type property, and the action itself.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: Rui Zhan

specification/compute/resource-manager/Microsoft.Compute/Compute/ComputeDisk/Disk.tsp

@@ -69,10 +69,12 @@ interface Disks {
   #suppress "@azure-tools/typespec-azure-resource-manager/no-response-body" "For backward compatibility"
   createOrUpdate is ComputeResourceCreateOrReplaceAsync<
     Disk,
-    Response = ArmResourceUpdatedResponse<Disk> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Disk> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: Disk;
-    })
+    Response =
+      | ArmResourceUpdatedResponse<Disk>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Disk> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: Disk;
+        })
   >;
 
   /**
@@ -83,10 +85,12 @@ interface Disks {
   update is ComputeCustomPatchAsync<
     Disk,
     DiskUpdate,
-    Response = ArmResponse<Disk> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Disk> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: Disk;
-    })
+    Response =
+      | ArmResponse<Disk>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Disk> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: Disk;
+        })
   >;
 
   /**
@@ -125,16 +129,20 @@ interface Disks {
   >;
 }
 
-@@doc(Disk.name,
+@@doc(
+  Disk.name,
   "The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters."
 );
 @@doc(Disk.properties, "Disk resource properties.");
-@@doc(Disks.createOrUpdate::parameters.resource,
+@@doc(
+  Disks.createOrUpdate::parameters.resource,
   "Disk object supplied in the body of the Put disk operation."
 );
-@@doc(Disks.update::parameters.properties,
+@@doc(
+  Disks.update::parameters.properties,
   "Disk object supplied in the body of the Patch disk operation."
 );
-@@doc(Disks.grantAccess::parameters.body,
+@@doc(
+  Disks.grantAccess::parameters.body,
   "Access data object supplied in the body of the get disk access operation."
 );

specification/compute/resource-manager/Microsoft.Compute/Compute/ComputeDisk/DiskAccess.tsp

@@ -44,10 +44,12 @@ interface DiskAccesses {
   #suppress "@azure-tools/typespec-azure-resource-manager/no-response-body" "For backward compatibility"
   createOrUpdate is ComputeResourceCreateOrReplaceAsync<
     DiskAccess,
-    Response = ArmResourceUpdatedResponse<DiskAccess> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskAccess> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: DiskAccess;
-    })
+    Response =
+      | ArmResourceUpdatedResponse<DiskAccess>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskAccess> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: DiskAccess;
+        })
   >;
 
   /**
@@ -58,10 +60,12 @@ interface DiskAccesses {
   update is ComputeCustomPatchAsync<
     DiskAccess,
     DiskAccessUpdate,
-    Response = ArmResponse<DiskAccess> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskAccess> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: DiskAccess;
-    })
+    Response =
+      | ArmResponse<DiskAccess>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskAccess> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: DiskAccess;
+        })
   >;
 
   /**
@@ -97,13 +101,16 @@ interface DiskAccesses {
   >;
 }
 
-@@doc(DiskAccess.name,
+@@doc(
+  DiskAccess.name,
   "The name of the disk access resource that is being created. The name can't be changed after the disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters."
 );
 @@doc(DiskAccess.properties, "");
-@@doc(DiskAccesses.createOrUpdate::parameters.resource,
+@@doc(
+  DiskAccesses.createOrUpdate::parameters.resource,
   "disk access object supplied in the body of the Put disk access operation."
 );
-@@doc(DiskAccesses.update::parameters.properties,
+@@doc(
+  DiskAccesses.update::parameters.properties,
   "disk access object supplied in the body of the Patch disk access operation."
 );

specification/compute/resource-manager/Microsoft.Compute/Compute/ComputeDisk/DiskEncryptionSet.tsp

@@ -44,10 +44,12 @@ interface DiskEncryptionSets {
   #suppress "@azure-tools/typespec-azure-resource-manager/no-response-body" "For backward compatibility"
   createOrUpdate is ComputeResourceCreateOrReplaceAsync<
     DiskEncryptionSet,
-    Response = ArmResourceUpdatedResponse<DiskEncryptionSet> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskEncryptionSet> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: DiskEncryptionSet;
-    })
+    Response =
+      | ArmResourceUpdatedResponse<DiskEncryptionSet>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskEncryptionSet> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: DiskEncryptionSet;
+        })
   >;
 
   /**
@@ -58,10 +60,12 @@ interface DiskEncryptionSets {
   update is ComputeCustomPatchAsync<
     DiskEncryptionSet,
     DiskEncryptionSetUpdate,
-    Response = ArmResponse<DiskEncryptionSet> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskEncryptionSet> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: DiskEncryptionSet;
-    })
+    Response =
+      | ArmResponse<DiskEncryptionSet>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = DiskEncryptionSet> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: DiskEncryptionSet;
+        })
   >;
 
   /**
@@ -102,13 +106,16 @@ interface DiskEncryptionSets {
   >;
 }
 
-@@doc(DiskEncryptionSet.name,
+@@doc(
+  DiskEncryptionSet.name,
   "The name of the disk encryption set that is being created. The name can't be changed after the disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters."
 );
 @@doc(DiskEncryptionSet.properties, "");
-@@doc(DiskEncryptionSets.createOrUpdate::parameters.resource,
+@@doc(
+  DiskEncryptionSets.createOrUpdate::parameters.resource,
   "disk encryption set object supplied in the body of the Put disk encryption set operation."
 );
-@@doc(DiskEncryptionSets.update::parameters.properties,
+@@doc(
+  DiskEncryptionSets.update::parameters.properties,
   "disk encryption set object supplied in the body of the Patch disk encryption set operation."
 );

specification/compute/resource-manager/Microsoft.Compute/Compute/ComputeDisk/DiskRestorePoint.tsp

@@ -105,9 +105,11 @@ interface DiskRestorePoints {
 }
 
 @@doc(DiskRestorePoint.name, "The name of the disk restore point created.");
-@@doc(DiskRestorePoint.properties,
+@@doc(
+  DiskRestorePoint.properties,
   "Properties of an incremental disk restore point"
 );
-@@doc(DiskRestorePoints.grantAccess::parameters.body,
+@@doc(
+  DiskRestorePoints.grantAccess::parameters.body,
   "Access data object supplied in the body of the get disk access operation."
 );

specification/compute/resource-manager/Microsoft.Compute/Compute/ComputeDisk/PrivateEndpointConnection.tsp

@@ -48,10 +48,12 @@ interface PrivateEndpointConnections {
   @operationId("DiskAccesses_UpdateAPrivateEndpointConnection")
   updateAPrivateEndpointConnection is ComputeResourceCreateOrReplaceAsync<
     PrivateEndpointConnection,
-    Response = ArmResourceUpdatedResponse<PrivateEndpointConnection> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = PrivateEndpointConnection> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: PrivateEndpointConnection;
-    })
+    Response =
+      | ArmResourceUpdatedResponse<PrivateEndpointConnection>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = PrivateEndpointConnection> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: PrivateEndpointConnection;
+        })
   >;
 
   /**
@@ -78,10 +80,12 @@ interface PrivateEndpointConnections {
   >;
 }
 
-@@doc(PrivateEndpointConnection.name,
+@@doc(
+  PrivateEndpointConnection.name,
   "The name of the private endpoint connection."
 );
 @@doc(PrivateEndpointConnection.properties, "Resource properties.");
-@@doc(PrivateEndpointConnections.updateAPrivateEndpointConnection::parameters.resource,
+@@doc(
+  PrivateEndpointConnections.updateAPrivateEndpointConnection::parameters.resource,
   "private endpoint connection object supplied in the body of the Put private endpoint connection operation."
 );

specification/compute/resource-manager/Microsoft.Compute/Compute/ComputeDisk/Snapshot.tsp

@@ -58,10 +58,12 @@ interface Snapshots {
   #suppress "@azure-tools/typespec-azure-resource-manager/no-response-body" "For backward compatibility"
   createOrUpdate is ComputeResourceCreateOrReplaceAsync<
     Snapshot,
-    Response = ArmResourceUpdatedResponse<Snapshot> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Snapshot> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: Snapshot;
-    })
+    Response =
+      | ArmResourceUpdatedResponse<Snapshot>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Snapshot> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: Snapshot;
+        })
   >;
 
   /**
@@ -72,10 +74,12 @@ interface Snapshots {
   update is ComputeCustomPatchAsync<
     Snapshot,
     SnapshotUpdate,
-    Response = ArmResourceUpdatedResponse<Snapshot> | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Snapshot> &
-      Azure.Core.Foundations.RetryAfterHeader> & {
-      @bodyRoot _: Snapshot;
-    })
+    Response =
+      | ArmResourceUpdatedResponse<Snapshot>
+      | (ArmAcceptedLroResponse<LroHeaders = ArmLroLocationHeader<FinalResult = Snapshot> &
+          Azure.Core.Foundations.RetryAfterHeader> & {
+          @bodyRoot _: Snapshot;
+        })
   >;
 
   /**
@@ -135,7 +139,10 @@ interface Snapshots {
   >;
 
   /**
-   * Locks the immutability policy of a snapshot. Once locked, the policy cannot be reduced or removed until the lock period expires.
+   * Locks or updates the immutability policy of a snapshot. This action requires elevated roles such as 'Owner' or 'Administrator'.
+   * When type is set to 'Locked', the policy is locked and the immutability duration cannot be reduced until expiry.
+   * When type is set to 'Unlocked', the policy is set or updated as an unlocked policy — this is functionally equivalent to calling
+   * updateImmutabilityPolicy, but requires elevated privileges. This action has all the privileges of updateImmutabilityPolicy.
    */
   @added(Versions.v2026_03_02)
   @action("updateImmutabilityPolicyLock")
@@ -149,23 +156,28 @@ interface Snapshots {
   >;
 }
 
-@@doc(Snapshot.name,
+@@doc(
+  Snapshot.name,
   "The name of the snapshot that is being created. The name can't be changed after the snapshot is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80 characters."
 );
 @@doc(Snapshot.properties, "Snapshot resource properties.");
-@@doc(Snapshots.createOrUpdate::parameters.resource,
+@@doc(
+  Snapshots.createOrUpdate::parameters.resource,
   "Snapshot object supplied in the body of the Put disk operation."
 );
-@@doc(Snapshots.update::parameters.properties,
+@@doc(
+  Snapshots.update::parameters.properties,
   "Snapshot object supplied in the body of the Patch snapshot operation."
 );
-@@doc(Snapshots.grantAccess::parameters.body,
+@@doc(
+  Snapshots.grantAccess::parameters.body,
   "Access data object supplied in the body of the get snapshot access operation."
 );
-@@doc(Snapshots.updateImmutabilityPolicy::parameters.body,
+@@doc(
+  Snapshots.updateImmutabilityPolicy::parameters.body,
   "Immutability policy data supplied in the body of the update immutability policy operation."
 );
-@@doc(Snapshots.updateImmutabilityPolicyLock::parameters.body,
+@@doc(
+  Snapshots.updateImmutabilityPolicyLock::parameters.body,
   "Immutability policy data supplied in the body of the update immutability policy lock operation."
 );
-