HOTSPOT - You need to correct the Azure Logic app error message. Which configuration values should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
Logic app:
You test the Logic app in a development environment. The following error message displays: '400 Bad Request'.
Troubleshooting of the error shows an HttpTrigger action to call the RequestUserApproval function.
Box 1: anonymous
To use your logic app's managed identity in your function, you must set your function's authentication level to anonymous. Otherwise, your logic app throws a "BadRequest" error.
Box 2: system-assigned
Your logic app or individual connections can use either the system-assigned identity or a single user-assigned identity, which you can share across a group of logic apps, but not both. On your logic app menu, under Settings, select Identity > System assigned
Explanation for using anonymous https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-azure-functions?tabs=consumption#set-up-your-function-for-anonymous-authentication-consumption-workflows-only
According to this article Function authz should be set to anonymous as we're using AAD auth. https://adatum.no/azure/azure-ad-authentication-in-azure-functions
agree on this based on the docs,
For your function to use your logic app's managed identity, you must set your function's authentication level to anonymous. Otherwise, your logic app workflow throws a BadRequest error.
For some weird reason Microsoft decided that logic apps cannot use the user-assigned identity when it is given to multiple. Totally random restriction that shows the inter-departmental issues in this organization. And they think that fault-line is a good question to ask.
We are fixing the logic app, not the function app. If you look at the function app code, you can see it's using function level authentication, so it can't be anonymous. I think it's function + system assigned.
I do agree the question is not clear. But if you think deep enough you will see that it is the function app that you need to change for the authorization (Box 1) and in the logic app to use the user-assigned-identity
Can use combination of auth level=Function + managed identity=user-assigned, this works if you set the Function, Logic App and API Management to use this same user-assigned identity.
otherwise, the simpler approach but less secure is to have auth level=Anonymous set to Function and the Logic App to have the system-assigned managed identity.
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
Only thing I can see "All user accounts and processes must receive only those privileges which are essential to perform their intended function." maybe system identity then ...
I think I would answer
Box1: anonymous
Box2: user-assigned -> there are 2 Logic Apps in the picture, so it makes sense to me to create a user-assigned identity that is being used for both Logic Apps?
Answer is Anonymous....To use your logic app's managed identity in your function, you must set your function's authentication level to anonymous. Otherwise, your logic app throws a "BadRequest" error.
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-azure-functions#set-up-anonymous-authentication-in-your-function
upvoted 7 times
...
This section is not available anymore. Please use the main Exam Page.AZ-204 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
mlantonis
Highly Voted 3 years, 5 months agobp_a_user
10 months, 1 week agomlantonis
3 years, 5 months agoHike1216
10 months, 2 weeks agorqb11
Highly Voted 3 years, 6 months agomicro9000
1 year, 11 months agoRaviNikkam
2 years, 5 months agogmishra88
2 years agoxRiot007
2 years, 4 months agoImass
3 years, 6 months agoanastakasim
3 years, 6 months agoZodiaC
3 years, 3 months agorobertical
Most Recent 5 months, 3 weeks agogmishra88
2 years agoChrisEvans
2 years, 6 months agogmishra88
2 years, 1 month agoSivajiTheBoss
2 years, 7 months agochingdm
2 years, 8 months agoedengoforit
2 years, 9 months agoJonas_86
3 years, 1 month agoning
3 years, 2 months agoning
3 years, 2 months agojkes80
3 years, 3 months agoZodiaC
3 years, 3 months agoanandhprakash
3 years, 5 months agoSnakePlissken
3 years, 5 months agogmishra88
2 years, 1 month agoif54uran
3 years, 4 months agohstml
3 years, 1 month agooadigun
3 years, 5 months ago