services / Azure / Remove Site Recovery fabric infrastructure

Removes the underlying infrastructure (process servers, gateways, and supporting components) associated with a Site Recovery replication fabric.

Dismantling the fabric infrastructure breaks the data path that carries replication, degrading or defeating disaster-recovery protection for workloads on the fabric.


Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​removeInfra/​action

Removes the servers and components underpinning replication, halting the protection path and rendering the DR copy unrecoverable.

Risks

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​RecoveryServices
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog