Solution: On Subscription1, you assign the Logic App Operator role to the Developers group. Does this meet the goal?

Note: This is part of a series of questions that present the same scenario. Each in the series contains a unique solution that might meet the stated goals. Some sets might have more than one correct solution, while others might not have a correct solution.

After you answer a in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Subscription1, you assign the Logic App Operator role to the Developers group. Does this meet the goal?
A . Yes
B . No

View Answer

Answer: B

Explanation:

The Logic App Operator role only lets you read, enable and disable logic app. With it you can view the logic app and run history, and enable/disable. Cannot edit or update the definition.

You would need the Logic App Contributor role. Explanations:

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app