Exam AZ-103 All Questions

View all questions & answers for the AZ-103 exam

Exam AZ-103 topic 1 question 3 discussion

Actual exam question from Microsoft's AZ-103

Question #: 3
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named
Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Logic App Contributor role to the Developers group.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
The Logic App Contributor role lets you manage logic app, but not access to them. It provides access to view, edit, and update a logic app.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

by pandeya442 at April 19, 2020, 3 a.m.

Comments

Submit Cancel

ucph

Highly Voted 5 years, 1 month ago

No it’s A Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; creating and configuring Automation accounts; adding solutions; and configuring Azure diagnostics on all Azure resources.

upvoted 5 times

...

Tranquillo1811

Most Recent 4 years ago

Answer must be B! Logic App Contributor can NOT create new Logic Apps. If you look at a JSON for a logic app, you see that the resource type is "microsoft.insights/components" if you take a look at the Logic App contributor role JSON (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor) you see the role does not have any rights to write into "microsoft.insights/components"...

upvoted 1 times

...

ZUMY

4 years, 3 months ago

A is correct

upvoted 1 times

...

Don123

4 years, 3 months ago

before you start posting YES /NO comments do some reach or dont POST.

upvoted 2 times

...

toniiv

4 years, 3 months ago

Yes is correct

upvoted 1 times

...

mikewallace8372

4 years, 5 months ago

answer is correct - contributer role needed

upvoted 1 times

...

aryise

4 years, 6 months ago

Correct Answer: A

upvoted 3 times

...

Nalex9ja

4 years, 8 months ago

After taking a critical look at this question, the only role that can give you the ability to create a Logic app has to be a role that has a scope on the resource group itself. all roles with their scope on the resource itself can't give you the permission to create. so the answer is B

upvoted 3 times

...

nikhiletl

4 years, 8 months ago

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group Creation is not possible using a contributor role Answer is B.

upvoted 1 times

kilowd

3 years ago

its possible if the contributor Role is assigned at the dev RG level

upvoted 1 times

...

Nalex9ja

4 years, 9 months ago

the correct answer is A. Logic app contributor role - Lets you manage logic apps, but not change access to them. Finally, the scope of this role is the resource Logic App alone

upvoted 2 times

...

cloudcuckooland

4 years, 10 months ago

The answer is 100% B. I've tested in my lab, Logic app contributor can manage the current logic apps but it's not possible to create new ones without additional permissions on the resource group level. It's easy to test, do it and see yourself. see: https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app Logic App Contributor: Lets you manage logic apps, but you can't change access to them. Logic App Operator: Lets you read, enable, and disable logic apps, but you can't edit or update them.

upvoted 4 times

sventrapapere

4 years, 10 months ago

Wanna know how you tested it, i just created another user in my test tenant gave him the "Logic app contributor" Role on the RG level and he can create logic apps in it :) whatch carefully

upvoted 2 times

...

hstorm

4 years, 9 months ago

That is 100% Wrong. Logic App Contributor: Lets you manage logic apps, but you can't change access to them. I have tested as well, which is very easy, and a new user with only Logic app contributor role on the RG can create a new logic app. Answer is 100% A

upvoted 8 times

...

gipu

4 years, 11 months ago

A, the answer is correct.

upvoted 4 times

...

NKnab

5 years ago

A - is correct. every service has its own contributor role too

upvoted 4 times

...

jonnybugaloo

5 years ago

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles Microsoft.Logic/* Manages Logic Apps resources. Microsoft.Resources/deployments/* Create and manage a deployment This is correct

upvoted 4 times

...

ExamGuy01

5 years, 1 month ago

so the answer is B???? Pls reply

upvoted 1 times

Kallandor

5 years, 1 month ago

Logic App Contributors: lets you manage logic apps, but not change access to them. Using this role u can create Logic Apps.

upvoted 5 times

...

pandeya442

5 years, 1 month ago

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

upvoted 1 times

...