services / Azure / Site Recovery replication protection container

A Site Recovery protection container groups the replicated (protected) items within a fabric and holds the container mappings that define how source workloads map to their recovery targets.

The container is the grouping layer between a fabric and its protected items; reconfiguring or removing it disrupts the protection of the workloads it holds, but it does not itself store recovery data.

Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​replicationProtectionContainers/​write

Creating or updating a protection container changes the mapping that governs how source workloads replicate to their targets, which can misdirect or weaken the protection of the contained items.

Risks

1. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links