services / Azure / Azure SQL Managed Instance distributed availability groups

A distributed availability group is a replication link between an Azure SQL Managed Instance and a partner instance (or SQL Server), used for high availability, disaster recovery, and migration.

These links sit in front of production managed-instance databases; controlling them affects data replication direction, availability, and where production data flows.

Microsoft.​Sql/​managedInstances/​distributedAvailabilityGroups/​delete

Deleting the distributed availability group tears down the replication/DR link supporting the production database's high availability, destroying that infrastructure and disrupting availability.

Risks

1. Denial-of-service (HIGH)
2. Infrastructure destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links