services / Azure / Traffic Manager Realtime User Metrics key

A subscription-level key used to authenticate client-side Realtime (Real) User Metrics telemetry submission for Traffic Manager.

The key is a secret that authorizes RUM telemetry reporting; it does not by itself grant identity or data-plane access, so its blast radius is limited to the metrics/telemetry function.

Microsoft.​Network/​trafficManagerUserMetricsKeys/​read

This get returns the subscription-level RUM collection key (secret material), so it exports cryptographic/credential material rather than merely enumerating it.

Risks

1. Cryptographic exfiltration (CRITICAL)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links