services / Azure / Application Insights events (telemetry)

The Events data-plane endpoint returns stored Application Insights telemetry records (requests, dependencies, exceptions, traces, custom events) via OData query.

Telemetry routinely contains sensitive data: request URLs/parameters, user identifiers, exception details, and sometimes PII or tokens. isDataAction read.

Microsoft.​Insights/​Components/​Events/​Read

Data-plane read that exports raw telemetry/log records which frequently contain sensitive request and user data, enabling log and data exfiltration.

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links