services / Azure / Site Recovery replication fabric

An Azure Site Recovery replication fabric represents a source or target location (Azure region, VMM/Hyper-V site, or on-premises environment) that hosts the replication topology and process/gateway servers linking protected workloads to their disaster-recovery copies.

The fabric is the root of the replication topology; deleting it cascades to every protection container and protected item it hosts, so its loss defeats disaster recovery for all workloads replicating through it.

Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​write

Creating or reconfiguring a fabric alters the replication topology and its gateway/process-server association, which can degrade or misdirect the protection path for workloads that depend on it.

Risks

1. Data manipulation (HIGH)
2. Defense destruction (EVASION)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links