services / Azure / Remove disks from Site Recovery protected item

Removes one or more disks from the set replicated for a protected item, excluding them from ongoing replication and recovery.

Dropping disks from replication silently narrows what is protected, so the excluded data becomes unrecoverable at failover while the item still appears protected.

Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​replicationProtectionContainers/​replicationProtectedItems/​removeDisks/​action

Excludes disks from replication, quietly removing their data from the recovery copy without disabling protection on the item as a whole.

Risks

1. Defense destruction (EVASION)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links