services / Azure / Network Manager IPAM pool

An IPAM pool within Azure Virtual Network Manager is a managed reservation of IP address space from which Azure and non-Azure resources draw non-overlapping allocations.

Primarily an address-space inventory/management object; abuse is limited to allocation manipulation that can cause routing/overlap problems rather than direct data or policy compromise.


Microsoft.​Network/​networkManagers/​ipamPools/​delete

Deleting a pool removes the address-space reservation that dependent resources allocate from, disrupting provisioning and addressing.

Risks

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Network
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog