services / Azure / DNS TXT record set

An authoritative DNS TXT record set within an Azure public DNS zone. TXT records hold free-form text used for SPF/DKIM/DMARC email-authentication policy and third-party domain-ownership verification tokens.

DNS record data is published and resolvable by design (public), but write/delete control over it governs how an organizational domain attests trust and routes mail/services.

Microsoft.​Network/​dnszones/​TXT/​delete

Deleting the TXT record set removes SPF/DKIM/DMARC and verification records, breaking email authentication and domain-validation flows for the domain (a DoS against the affected functions).

Risks

1. Network destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links