services / Azure / Azure SQL Managed Instance hybrid link

A hybrid link (Managed Instance link) is a distributed availability group that replicates databases between an external/on-premises SQL Server and an Azure SQL Managed Instance.

Operates on a production database service; the link governs cross-environment replication of database contents.


Microsoft.​Sql/​managedInstances/​hybridLink/​delete

Deletes the distributed availability group, tearing down the replication/availability infrastructure for the managed instance with a DoS-like effect on replication and migration.

Risks

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Sql
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog