services / Azure / Logic App workflow run action

A workflow run action represents a single executed step within a Logic App run, including links to that step's inputs and outputs.

Action inputs/outputs commonly carry the actual sensitive business data, API responses, and payloads flowing between workflow steps.


Microsoft.​Logic/​workflows/​runs/​actions/​read

Reading a run action exposes that step's inputs/outputs (or links to them), which frequently contain the sensitive data processed by the workflow.

Risks

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Logic
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog