Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.