services / Azure / Azure SQL Database

An Azure SQL Database is a managed relational database hosted on a logical SQL server, storing production organizational data for an application or function.

Control-plane operations manage the database resource and its configuration; the row data itself is on the data plane. The asset typically backs a single production function, hence HIGH.

Microsoft.​Sql/​servers/​databases/​write

Creates or updates the database's ARM properties, including SKU/tier, read-scale, zone redundancy, and transparent data encryption settings; an attacker can degrade the service (config drift) or weaken TDE-related protections on stored data.

Risks

1. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links