services / Azure / Log Analytics workspace table (App GenAI content)

A Log Analytics workspace data-plane table storing logged generative-AI application content such as prompts and completions. Read access returns the table's records.

GenAI prompt/response content frequently carries sensitive user or business data, exceeding ordinary operational logging.

Microsoft.​OperationalInsights/​workspaces/​Query/​AppGenAIContent/​read

Reading the table exports logged GenAI prompts/responses (exfiltration:logs) that often contain sensitive organizational or user data captured in the content (exfiltration:data).

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links