Tenable finds an Azure flaw, Microsoft calls it a feature

Microsoft confirmed the issue as an "elevation of privilege flaw" and paid Tenable a bug bounty, but decided to address it with a "comprehensive documentation update" rather than a fix.

Read at Theregister