exam questions

Exam AZ-103 All Questions

View all questions & answers for the AZ-103 exam

Exam AZ-103 topic 1 question 3 discussion

Actual exam question from Microsoft's AZ-103
Question #: 3
Topic #: 1
[All AZ-103 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named
Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Logic App Contributor role to the Developers group.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
The Logic App Contributor role lets you manage logic app, but not access to them. It provides access to view, edit, and update a logic app.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ucph
Highly Voted 4 years, 11 months ago
No it’s A Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; creating and configuring Automation accounts; adding solutions; and configuring Azure diagnostics on all Azure resources.
upvoted 5 times
...
Tranquillo1811
Most Recent 3 years, 10 months ago
Answer must be B! Logic App Contributor can NOT create new Logic Apps. If you look at a JSON for a logic app, you see that the resource type is "microsoft.insights/components" if you take a look at the Logic App contributor role JSON (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor) you see the role does not have any rights to write into "microsoft.insights/components"...
upvoted 1 times
...
ZUMY
4 years, 1 month ago
A is correct
upvoted 1 times
...
Don123
4 years, 1 month ago
before you start posting YES /NO comments do some reach or dont POST.
upvoted 2 times
...
toniiv
4 years, 2 months ago
Yes is correct
upvoted 1 times
...
mikewallace8372
4 years, 3 months ago
answer is correct - contributer role needed
upvoted 1 times
...
aryise
4 years, 4 months ago
Correct Answer: A
upvoted 3 times
...
Nalex9ja
4 years, 6 months ago
After taking a critical look at this question, the only role that can give you the ability to create a Logic app has to be a role that has a scope on the resource group itself. all roles with their scope on the resource itself can't give you the permission to create. so the answer is B
upvoted 3 times
...
nikhiletl
4 years, 7 months ago
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group Creation is not possible using a contributor role Answer is B.
upvoted 1 times
kilowd
2 years, 11 months ago
its possible if the contributor Role is assigned at the dev RG level
upvoted 1 times
...
...
Nalex9ja
4 years, 8 months ago
the correct answer is A. Logic app contributor role - Lets you manage logic apps, but not change access to them. Finally, the scope of this role is the resource Logic App alone
upvoted 2 times
...
cloudcuckooland
4 years, 9 months ago
The answer is 100% B. I've tested in my lab, Logic app contributor can manage the current logic apps but it's not possible to create new ones without additional permissions on the resource group level. It's easy to test, do it and see yourself. see: https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app Logic App Contributor: Lets you manage logic apps, but you can't change access to them. Logic App Operator: Lets you read, enable, and disable logic apps, but you can't edit or update them.
upvoted 4 times
sventrapapere
4 years, 8 months ago
Wanna know how you tested it, i just created another user in my test tenant gave him the "Logic app contributor" Role on the RG level and he can create logic apps in it :) whatch carefully
upvoted 2 times
...
hstorm
4 years, 8 months ago
That is 100% Wrong. Logic App Contributor: Lets you manage logic apps, but you can't change access to them. I have tested as well, which is very easy, and a new user with only Logic app contributor role on the RG can create a new logic app. Answer is 100% A
upvoted 8 times
...
...
gipu
4 years, 10 months ago
A, the answer is correct.
upvoted 4 times
...
NKnab
4 years, 10 months ago
A - is correct. every service has its own contributor role too
upvoted 4 times
...
jonnybugaloo
4 years, 11 months ago
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles Microsoft.Logic/* Manages Logic Apps resources. Microsoft.Resources/deployments/* Create and manage a deployment This is correct
upvoted 4 times
...
ExamGuy01
4 years, 11 months ago
so the answer is B???? Pls reply
upvoted 1 times
Kallandor
4 years, 11 months ago
Logic App Contributors: lets you manage logic apps, but not change access to them. Using this role u can create Logic Apps.
upvoted 5 times
...
...
pandeya442
5 years ago
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago