A project owner has Contributor on a resource group. A CanNotDelete lock exists on the group. What happens when the owner attempts to delete a contained storage account through Azure Resource Manager?

1. The inherited lock blocks deletion
2. Contributor bypasses all resource locks
3. Only the resource group's own deletion is blocked
4. Blob uploads are also universally blocked by this lock