services / Azure / Log Analytics workspace table (Confidential Ledger user-defined logs)

A Log Analytics workspace data-plane table storing user-defined Azure Confidential Ledger entries. Read access returns the table's records.

User-defined ledger entries hold application-specific confidential records the ledger was designed to protect.

Microsoft.​OperationalInsights/​workspaces/​Query/​LedgerUserDefinedLogs/​read

Reading the table exports user-defined ledger records (exfiltration:logs) whose arbitrary application content may carry sensitive organizational data (exfiltration:data).

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links