services / Azure / IP Group

An IP Group is a reusable named set of IP addresses/ranges referenced by Azure Firewall and NSG rules, letting many rules share a single maintained address list.

An IP Group is referenced by firewall/NSG rules; changing its ranges silently reshapes every rule that references it, making it a policy-bearing object.

Microsoft.​Network/​ipGroups/​delete

Deleting an IP Group removes the address list that referencing firewall/NSG rules depend on, breaking or degrading those rules and the traffic they govern.

Risks

1. Denial-of-service (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links