services / Azure / Log Analytics workspace table (ABAPTableDataLog)

A single named table within an Azure Log Analytics (Operational Insights) workspace, queried via the data plane. This Microsoft Sentinel for SAP table captures changes to ABAP business/application table data.

Because it logs the contents of SAP ERP business-table changes, this table can contain sensitive organizational data values rather than only operational telemetry.

Microsoft.​OperationalInsights/​workspaces/​Query/​ABAPTableDataLog/​read

Reading this table exports captured SAP ABAP business-table data change records, exposing both the log records and the underlying organizational/ERP data values they contain.

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links