services / Azure / APIM Product-group links

Product-group links are association records in an Azure API Management workspace that connect a product to developer-portal groups, governing which groups can see and subscribe to a product's APIs.

These control developer-portal product visibility/subscription eligibility (an access-control-adjacent surface for a single API gateway function); they are not Azure RBAC/IAM role assignments.

Microsoft.​ApiManagement/​service/​workspaces/​products/​groupLinks/​delete

Deleting a product-group link revokes a developer group's authorized access to a product, denying legitimate consumers access to its APIs.

Risks

1. Denial-of-access (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links