services / Azure / APIM group users

The membership association between API Management developer-portal groups and user accounts; groups gate visibility of and access to API products.

Group membership governs which products/APIs a developer-portal account can see and subscribe to, so it functions as an access-control grouping within the APIM instance.

Microsoft.​ApiManagement/​service/​groups/​users/​delete

Removing a user from a group revokes that account's group-derived product/API access, denying authorized operational access.

Risks

1. Denial-of-access (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links