services / Azure / Site Recovery replication migration item

A Site Recovery migration item is a workload being replicated for migration into Azure (Azure Migrate scenario), tracking its replication state and migration target configuration.

Migration items hold in-flight replication state and target configuration for a workload's move into Azure; deleting or reconfiguring them disrupts the migration and can misdirect where the workload lands.


Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​replicationProtectionContainers/​replicationMigrationItems/​delete

Deleting a migration item discards its replication state, destroying the in-flight migration copy of the workload.

Risks

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​RecoveryServices
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog