diff --git a/awx/main/access.py b/awx/main/access.py
index f9a6983b5b..34fe973445 100644
--- a/awx/main/access.py
+++ b/awx/main/access.py
@@ -1370,6 +1370,8 @@ class ExecutionEnvironmentAccess(BaseAccess):
         return self.check_related('organization', Organization, data, obj=obj, mandatory=True, role_field='execution_environment_admin_role')
 
     def can_delete(self, obj):
+        if obj.managed_by_tower:
+            raise PermissionDenied
         return self.can_change(obj, None)