Azure AD users could escalate their privileges using the Log Analytics Contributor role to reach the full Subscription Contributor role.
Mon, Sep 13th, 2021