services / Azure / Log Analytics logs (data plane)

Data-plane access to the content of all tables in a Log Analytics workspace, the central store of ingested logs and telemetry from across the monitored environment.

A workspace aggregates operational, security, and identity telemetry from many sources, so broad read access can expose sensitive data well beyond ordinary logs.

Microsoft.​Insights/​Logs/​Read

Data-plane read of ALL Log Analytics tables, enabling wholesale export of collected telemetry that can contain sensitive operational, security, and identity data across the entire workspace.

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links