services / Azure / Connector Gateway Connection Access Policy

Authorization bindings on a Connector Gateway connection that govern which principals may use the credential-bearing connection to access a backend data source.

Access policies control use of a credential-bearing connection; altering them can grant unauthorized use of the connection and its backend credentials, or revoke legitimate access.

Microsoft.​Web/​connectorGateways/​connections/​accessPolicies/​delete

Deleting a connection access policy removes the access-control binding governing the connection, tearing down authorization that would otherwise deny use and stripping legitimate principals' access.

Risks

1. Policy destruction (CRITICAL)
2. Denial-of-access (EVASION)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links