services / Azure / Virtual Machines

An Azure virtual machine: a production compute resource running an OS, applications, attached disks, network interfaces, and optionally a managed identity.

A VM typically supports a single organizational function; control-plane and data-plane access to it can expose on-disk data, attached managed-identity credentials, and the hosted service's availability.

Microsoft.​Compute/​virtualMachines/​reimage/​action

Resets the VM's differencing OS disk back to its original image state, wiping any OS-level changes and application data written since deployment and interrupting the running workload.

Risks

1. Data destruction (CRITICAL)
2. Denial-of-service (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links