services / Azure / Storage DataShare

A storage data share is a control-plane sub-resource of a storage account that configures sharing of the account's data with recipients, potentially external or cross-tenant.

Directly governs distribution of a single storage account's organizational data, making it a sensitive data-egress control point.

Microsoft.​Storage/​storageAccounts/​dataShares/​delete

Deleting a data share removes the sharing configuration, disrupting downstream consumers that depend on the share, but does not delete the underlying stored data.

Risks

1. Infrastructure destruction (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links