A FortiGate can have multiple VDOMs. In advanced ADOM mode in FortiManager, you can assign VDOMs of a FortiGate to different ADOMs. If a user locks an ADOM and installs configurations to one of the VDOMs, other users can lock other ADOMs that have VDOMs for the FortiGate.
For example, FortiManager has advanced ADOM mode enabled, and there are two users: user1 and user2. A FortiGate has VDOMs that are assigned to the root ADOM and a test ADOM. In the test ADOM, the first user (user1) locks the ADOM, and installs a configuration to a VDOM of the FortiGate. In the root ADOM, the second user (user2) can view the red lock icon, for example:
The second user can lock the root ADOM. The following example, shows the locked root ADOM: