Hello Yury Yurchanka, PAL association only adds partners' PartnerID to the credential already provisioned. It doesn't alter any permissions (Azure role) or provide extra Azure service data to the partner or Microsoft. You can provide an explicit mention of this to your customer from official Microsoft reference - https://learn.microsoft.com/en-us/partner-center/membership/link-partner-id-for-azure-performance-pal-dpor#does-pal-association-affect-the-security-of-a-customers-azure-environment
Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.