Azure Logic App Creation for Developers in Dev Resource Group
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named
Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Logic App Contributor role to the Developers group.
Does this meet the goal?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B.A
The Logic App Contributor role lets you manage logic app, but not access to them. It provides access to view, edit, and update a logic app.
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-appThe provided solution does meet the stated goal, which is to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
The Logic App Contributor role provides permissions to create, edit, and delete logic apps and their dependencies such as connectors, APIs, and gateways. Assigning this role to the Developers group on the Dev resource group would grant them the necessary permissions to create logic apps in that resource group.
It is important to note that the Developers group must have appropriate permissions at the Azure AD tenant level to access Subscription1 before they can create resources in the Dev resource group. This can be achieved by assigning the appropriate Azure AD roles to the Developers group or by using Azure AD group-based access control (Azure AD GBAC) to assign roles to the group.
Also, assigning the Logic App Contributor role at the resource group level only grants permissions for that specific resource group. If the Developers group needs to create logic apps in other resource groups, the role must be assigned at the appropriate resource group level as well.
In summary, assigning the Logic App Contributor role to the Developers group on the Dev resource group would provide them with the ability to create Azure logic apps in that resource group, assuming they have appropriate permissions at the Azure AD tenant level.
