Restrict Delete and Write Permissions

Info

ID: MS-M7040
MITRE mitigation: M1022

Limit who can delete or modify data in storage accounts, databases, and other repositories. Restricting destructive permissions prevents attackers from causing data loss even if they gain access to the environment.

Techniques Addressed by Mitigation

ID	Name	Use
MS-TA7027	Data destruction	Limit who can delete or modify data in storage accounts, databases, and other repositories.