
Explanation

Box 1: Get-AzResource
Use the following command to examine the access control mode for all workspaces in the subscription:
PowerShell
Get-AzResource -ResourceType Microsoft.OperationalInsights/workspaces -ExpandProperties | foreach
{$_.Name + ": " + $_.Properties.features.enableLogAccessUsingOnlyResourcePermissions Box 2: -ResourceType Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-access