services / Azure / Site Recovery protected item planned failover

Triggers a planned failover of a protected item to its recovery region, gracefully moving the running workload to the recovery site.

A planned failover relocates the live workload to the recovery site; though graceful, an unauthorized invocation disrupts production and moves the workload to the configured recovery network.

Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​replicationProtectionContainers/​replicationProtectedItems/​plannedFailover/​action

Moves the running workload to the recovery region, interrupting the production instance.

Risks

1. Denial-of-service (HIGH)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links