Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 2 question 51 discussion

Actual exam question from Microsoft's AZ-104
Question #: 51
Topic #: 2
[All AZ-104 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers.
Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Logic App Contributor role to the Developers group.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by shako at Dec. 9, 2021, 4:44 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
MrMacro
Highly Voted 2 years, 10 months ago
Answer "Yes" is correct. Logic App Contributor role will allow you to create Logic Apps. See here: https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app?tabs=azure-portal "Your Azure subscription requires Contributor permissions for the resource group that contains that logic app resource. If you create a logic app resource, you automatically have Contributor access."
upvoted 63 times
itguy2
2 years, 6 months ago
ANSWER: B Contributor and Logic App Contributor are different...from your link Logic App Contributor: Lets you manage logic apps, but you can't change access to them. Logic App Operator: Lets you read, enable, and disable logic apps, but you can't edit or update them. Contributor: Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.
upvoted 16 times
klasbeatz
2 years ago
Microsoft doesn't say it directly on site so I thought the same they almost present as of Contributor and Logic app contributor are different
upvoted 1 times
...
MeysamBayani
1 year, 8 months ago
in dev resource group you can create a logic app. when you try create logic app in this RG change plane type to consumption ....
upvoted 2 times
...
Graindai
1 year ago
Wrong, you can manage with : https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor : Microsoft.Resources/deployments/* Create and manage a deployment So answer is yes
upvoted 7 times
Gpsn
9 months, 2 weeks ago
Microsoft.Resources/deployments/* - isn't that for creating the deployments, instead of the logic app itself?
upvoted 3 times
...
...
Load full discussion...
...
...
Emre_jm
Highly Voted 1 year, 11 months ago
Tested today, gave "Logic App Contributor" role to a user account. During Logic App creation phase got error under RG selection: "You cannot perform this action without all the following permissions (Microsoft.Storage/storageAccounts/write, Microsoft.Web/ServerFarms/write, Microsoft.Web/Sites/write"
upvoted 11 times
...
SeMo0o0o0o
Most Recent 3 weeks, 5 days ago
Selected Answer: A
A is correct Logic App Contributor & Contributor can create logical apps
upvoted 1 times
...
asaulu
1 month, 3 weeks ago
Microsoft.Resources/deployments/* Create and manage a deployment ... Means Logic App Contributor can create a logic app
upvoted 1 times
...
Carmen_Ms
2 months ago
Tested! The answer is A, you can create logic apps but only of the comsumption type. So the objective is fulfilled. All those who say the B, you have not tested it correctly.
upvoted 3 times
etrop
2 months ago
Yeah I applied the Logic App Contributor role at the resource group level for a test user, then attempted to create a logic app. As long as the resource provider Microsoft.Web is registered already (For this question we can assume it is) then you can create logic apps of consumption type. If you want to create other types you need a few other perms (Microsoft.Storage/storageAccounts/write, Microsoft.Web/ServerFarms/write, Microsoft.Web/Sites/write)
upvoted 1 times
...
...
DevopsRock
2 months ago
Selected Answer: A
Answer is A
upvoted 3 times
...
a6bd45e
2 months, 2 weeks ago
Selected Answer: B
In Azure, the Logic App Contributor role does not inherently have the permissions to create new logic apps. The Logic App Contributor role allows users to manage logic apps but not create them. Specifically, this role includes permissions to read, write, and delete logic apps, but it lacks the permission required to create new ones, which is part of the broader Logic App Operator role or higher. To create new logic apps, users generally need either the Logic App Operator role or a custom role with the following specific permission: Microsoft.Logic/workflows/write. This permission is necessary to create logic apps and is included in the Logic App Operator role or higher-level roles like Contributor or Owner.
upvoted 2 times
...
Makoporosh
3 months ago
No: While the Logic App Contributor role is useful for managing existing logic apps, it does not grant permissions to create new logic apps or other Azure resources. Therefore, to meet the requirement of allowing the Developers group to create Azure Logic Apps in the Dev resource group, you must assign them the Contributor role at the resource group level.
upvoted 1 times
...
apazman123
3 months ago
Selected Answer: B
Contributor and Logic App Contributor are different
upvoted 1 times
...
004b54b
3 months, 1 week ago
Selected Answer: B
Based on https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor, answer should be B. No
upvoted 1 times
...
HelixAbdu
3 months, 3 weeks ago
the Answer Is No. I just tried it and got this error: You cannot perform this action without all of the following permissions (Microsoft.Storage/storageAccounts/write, Microsoft.Web/ServerFarms/write, Microsoft.Web/Sites/write)
upvoted 3 times
...
MSExpertGER
3 months, 3 weeks ago
Selected Answer: B
B ( NO ) is correct. to create resources in a resource group, you need to be a Contibutor (Built-in Role). The Logic Apps Contributor may change certain settings on an individual Logic App Instance, but not create a new Logic App resource! https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/integration#logic-app-contributor
upvoted 1 times
...
Hommedollars
4 months, 3 weeks ago
The answer is "Yes", assigning the Logic App Contributor role to the Developers group on the Dev resource group will meet the goal of providing the Developers group with the ability to create Azure Logic Apps in the Dev resource group. The Logic App Contributor role grants users the permissions necessary to create, update, and delete Logic Apps, but does not grant permissions to manage the resource group itself. This ensures that members of the Developers group can work within the Dev resource group to create Logic Apps without granting them broader permissions within the subscription. So, the solution provided meets the goal effectively.
upvoted 3 times
...
3c5adce
5 months ago
While the Logic App Standard Developer role provides more specific permissions tailored for developers working with Logic Apps, the Logic App Contributor role still grants the necessary permissions to create and manage logic apps within the specified resource group. Therefore, both solutions meet the goal of providing the Developers group with the ability to create Azure Logic Apps in the Dev resource group.
upvoted 1 times
...
Shif
5 months ago
Only logic app standard developer will be able to do this. Hence NO
upvoted 1 times
3c5adce
5 months ago
While the Logic App Standard Developer role provides more specific permissions tailored for developers working with Logic Apps, the Logic App Contributor role still grants the necessary permissions to create and manage logic apps within the specified resource group. Therefore, both solutions meet the goal of providing the Developers group with the ability to create Azure Logic Apps in the Dev resource group.
upvoted 1 times
...
...
Kifla
5 months ago
Correct answer: A Task is to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Logic App Contributor role has the following permission: Microsoft.Resources/deployments/* Create and manage a deployment This would allow Dev group to create Azure logic apps in the Dev RG. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/integration#logic-app-contributor
upvoted 1 times
...
6f80f6c
5 months ago
Selected Answer: B
Answer is B, you are now managing the Resource Group, not the Logic App
upvoted 2 times
...
Load full discussion...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel