services / Azure / Site Recovery recovery plan planned failover

Triggers a planned failover of all protected items in a recovery plan to their recovery region, gracefully moving the grouped workloads to the recovery site.

A planned failover relocates every workload in the plan to the recovery site; though graceful, an unauthorized invocation broadly disrupts production for the whole group.

Microsoft.​RecoveryServices/​Vaults/​replicationRecoveryPlans/​plannedFailover/​action

Moves every workload in the plan to the recovery region, interrupting the production instances across the group.

Risks

1. Denial-of-service (HIGH)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links