Microsoft.ApiManagement/service/users/delete – 1 risks

The IAM Privilege Catalog

services / Azure / API Management user accounts

A developer-portal user account record in an Azure API Management (APIM) service instance.

User accounts can be used to obtain/manage subscriptions and subscription keys for APIs published through the APIM instance.

Microsoft.ApiManagement/service/users/delete

Deletes a developer-portal user account, removing the identity from the API Management instance.

Risks

Account destruction (CRITICAL)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

https://azure.permissions.cloud/iam/Microsoft.ApiManagement

https://learn.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations

Contributed by P0 Security

© 2023–present P0 Security and contributors to the IAM Privilege Catalog