services / Azure / Azure SQL Managed Database

A database hosted on an Azure SQL Managed Instance, holding production organizational data for a single application or function.

Production data store; the data plane holds sensitive organizational data, while the control plane manages the database resource configuration.

Microsoft.​Sql/​managedInstances/​databases/​write

Creates or updates the managed database's ARM properties (e.g. collation, restore source); lets an attacker drift the resource's configuration away from its intended state.

Risks

1. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links