services / Azure / Log Analytics linked service

A linked service that binds the workspace to another resource (such as an Automation account or a cluster) used for data collection and processing.

Linked services connect the workspace to the resources that feed and process its telemetry; breaking them disrupts collection; HIGH.

Microsoft.​OperationalInsights/​workspaces/​linkedservices/​write

Re-pointing or altering a linked service can disrupt the collection/processing pipeline it enables, suppressing telemetry.

Risks

1. Defense destruction (EVASION)
2. Logs destruction (EVASION)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links