Creating Azure Logic Apps with Developers Group in Azure AD and Subscription1

Assigning the Contributor Role to Developers Group for Azure Logic App Creation in Dev Resource Group

Question

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named

Developers. Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Contributor role to the Developers group.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A

The Contributor role lets you manage everything except access to resources. It allows you to create and manage resources of all types, including creating Azure logic apps.

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor

The provided solution, "On Dev, you assign the Contributor role to the Developers group," meets the goal of providing the Developers group with the ability to create Azure logic apps in the Dev resource group.

When you assign the Contributor role to the Developers group, they will have full access to all resources in the Dev resource group, including the ability to create, modify, and delete Azure resources such as logic apps.

The Contributor role is one of the built-in roles in Azure that allows users to manage all resources in a specific scope, in this case, the Dev resource group. By assigning this role to the Developers group, all users within the group will have the same level of access to resources in the Dev resource group.

It's important to note that assigning the Contributor role to the Developers group also grants them access to all other resources in the Dev resource group, not just logic apps. If the goal is to limit the access of the Developers group to only logic apps, a more restrictive role such as the Logic App Contributor role can be assigned instead.

In summary, the provided solution meets the goal of providing the Developers group with the ability to create Azure logic apps in the Dev resource group.