services / Azure / Remove Site Recovery replication fabric

Removes a Site Recovery replication fabric and its associated replication topology from the vault.

Removing a fabric destroys the replication topology and the protection it provides to every workload hosted on it, defeating disaster recovery; equivalent in effect to deleting the fabric.


Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​remove/​action

Tears down the fabric and its contained protection, eliminating the disaster-recovery copy for the workloads it hosts.

Risks

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​RecoveryServices
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog