Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 6 question 9 discussion

Actual exam question from Microsoft's AZ-303

Question #: 9
Topic #: 6

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named
Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Logic App Contributor role to the Developers group.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
The Logic App Contributor role lets you read, enable and disable logic app.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor

by Dfg2001 at July 3, 2021, 1:30 p.m.

Comments

Submit Cancel

Dfg2001

Highly Voted 3 years, 11 months ago

Should be yes. It's LogicApp Operator that enables/disables LogicApps. See https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

upvoted 32 times

rdemontis

3 years, 11 months ago

exactly! correct answer is Yes!

upvoted 3 times

...

aut0pil0t

3 years, 11 months ago

Yup, agreed

upvoted 2 times

...

wayne60702

3 years, 7 months ago

2021/11/01 , I tried it on the Azure Portal , The answer is Yes !

upvoted 2 times

...

subbu3071988

3 years, 9 months ago

Answer is No. I tried it on the Azure Portal. In addition to just Logic App Contributor, you require at least a Storage Account Contributor access without which you cannot even select the Resource Group while creating a Logic App. So answer should be "No".

upvoted 4 times

hogtrough

3 years, 8 months ago

LogicApp Operator can enable/disable Logic Apps, but they cannot create them which is the question at hand. Top answer is not paying attention to question.

upvoted 4 times

AD3

3 years, 3 months ago

Question is can you create logic app with just the contributor role to it ? If you don't have contributor role for the storage then would it still meet the goal? Ultimately you have to meet the goal and if you don't have contributor access to both you can't create the logic app. I think the answer is No.

upvoted 1 times

...

AberdeenAngus

3 years, 4 months ago

Yes completely right, the error message in the portal when trying to create a logic app with only the Logic App Contributor role is: You cannot perform this action without all of the following permissions (Microsoft.Storage/storageAccounts/write, Microsoft.Web/ServerFarms/write, Microsoft.Web/Sites/write)

upvoted 2 times

...

kkrGmail

Most Recent 3 years, 2 months ago

Selected Answer: A

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor Permission Json states, "Microsoft.Logic/*"

upvoted 1 times

...

syu31svc

3 years, 9 months ago

Answer is Yes The Logic App Contributor role allows you to create, read, enable and disable logic app. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor

upvoted 4 times

...

ravy_rv

3 years, 9 months ago

Juts tested. Logic App Cont lets you MANAGE logic apps, but not change access to them or create them. Tested in a lab. It errors out ans asks for */storageaccoutns/write and */Sites/write as well.

upvoted 3 times

gizda2

3 years, 8 months ago

Sure but it does not mean that YES answer is fundamentally wrong.

upvoted 1 times

...