services / Azure / Site Recovery protection cluster unplanned failover

Triggers an unplanned failover of a protection cluster to its recovery region, bringing the clustered workload up from recovery points without a graceful source shutdown.

An unplanned cluster failover forcibly relocates the clustered workload to the recovery site, disrupting production and moving it into the configured recovery network.

Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​replicationProtectionContainers/​replicationProtectionClusters/​unplannedFailover/​action

Forces the clustered workload over to the recovery region, disrupting the running service and relocating it into the configured recovery network the attacker may control.

Risks

1. Denial-of-service (HIGH)
2. Network movement (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links