we have an azure app service for which I can only view the logs through log stream by using an azure cli command and the log stream from the portal UI has been disabled for me. So, I want to know which least privileged access or permissions I should need to my azure account to access the log stream through the portal.