services / Azure / Azure SQL DB job credential

An Azure SQL DB job credential stores the username and (write-only) password the job agent uses to authenticate to target databases when running elastic jobs.

The control-plane read does not return the secret password (it is write-only), so reads only expose the identity/username rather than usable secret material.

Microsoft.​Sql/​servers/​jobAgents/​credentials/​delete

Deleting a job credential removes the authentication object jobs depend on, breaking the scheduled automation and denying it authorized access to target databases.

Risks

1. Infrastructure destruction (HIGH)
2. Denial-of-access (EVASION)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links