services / Azure / Azure SQL Sync Group

An Azure SQL Data Sync group defines a hub-and-member data replication topology that synchronizes table data between a hub database and one or more member databases. It is a control-plane configuration object on a production database.

Sync groups govern the flow of operational data between databases; misconfiguration can redirect, overwrite, or disrupt replication of a single organizational function's data.


Microsoft.​Sql/​servers/​databases/​syncGroups/​delete

Deleting a sync group tears down the replication relationship, destroying the sync configuration and disrupting ongoing data synchronization between the hub and member databases.

Risks

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Sql
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog