services / Azure / API Management client applications

A client application is a registered OAuth application identity that consumes/authenticates to APIs published through API Management.

These registrations are credential-bearing application identities; their secrets grant authenticated API access.

Microsoft.​ApiManagement/​service/​clientApplications/​delete

Deleting a client application removes a registered application identity (destruction:account) and revokes a legitimate consumer's authorized API access (impact:access).

Risks

1. Account destruction (CRITICAL)
2. Denial-of-access (EVASION)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links