Examice

Exam AZ-104 All QuestionsBrowse all questions from this exam

Question 91

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers.

Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Logic App Contributor role to the Developers group.

Does this meet the goal?

Yes

Correct Answer: A

Assigning the Logic App Contributor role to the Developers group on the Dev resource group will meet the goal of providing the Developers group with the ability to create Azure logic apps in the Dev resource group. The Logic App Contributor role grants users the permissions necessary to create, update, and delete logic apps, as well as managing related resources within the scope of the resource group. This ensures that members of the Developers group can work within the Dev resource group to create and manage logic apps without needing broader permissions within the subscription.

Discussion

cjAzure

I’m putting this at the very beginning so newcomers here are encouraged to continue. I just passed my exam (910/1000). 99.99% of questions are from here, including the cases. Microsoft are too lazy to change them (which is a good thing for us, i guess?). Be sure to use the comment section (especially comments from Mlantonis). Good luck guys!!

Sharathjogi

Thank you, it brings hopes!

Azure_daemon

Thank you

Gresch123123

It is a slog the first read through, as it's all new informatoin. The second read through is easy as you already learnt, that is sufficient to pass

darkskullSB

Hi, do I need to purchase the paid dumps or the free dumps are enough?

cankayahmet

free dumps are enough. I passed 3 microsoft exams only check free dumps.

Wouterjuhh

NO, in this case the free dump will not be enough I found out the hard way. I had my exam last week and maye saw 1 or 2 questions from the free dump.

MrMacroOption: A

Answer "Yes" is correct. Logic App Contributor role will allow you to create Logic Apps. See here: https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app?tabs=azure-portal "Your Azure subscription requires Contributor permissions for the resource group that contains that logic app resource. If you create a logic app resource, you automatically have Contributor access."

itguy2

ANSWER: B Contributor and Logic App Contributor are different...from your link Logic App Contributor: Lets you manage logic apps, but you can't change access to them. Logic App Operator: Lets you read, enable, and disable logic apps, but you can't edit or update them. Contributor: Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.

klasbeatz

Microsoft doesn't say it directly on site so I thought the same they almost present as of Contributor and Logic app contributor are different

MeysamBayani

in dev resource group you can create a logic app. when you try create logic app in this RG change plane type to consumption ....

Graindai

Wrong, you can manage with : https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor : Microsoft.Resources/deployments/* Create and manage a deployment So answer is yes

Gpsn

Microsoft.Resources/deployments/* - isn't that for creating the deployments, instead of the logic app itself?

HelixAbduOption: B

the Answer Is No. I just tried it and got this error: You cannot perform this action without all of the following permissions (Microsoft.Storage/storageAccounts/write, Microsoft.Web/ServerFarms/write, Microsoft.Web/Sites/write)

HommedollarsOption: A

The answer is "Yes", assigning the Logic App Contributor role to the Developers group on the Dev resource group will meet the goal of providing the Developers group with the ability to create Azure Logic Apps in the Dev resource group. The Logic App Contributor role grants users the permissions necessary to create, update, and delete Logic Apps, but does not grant permissions to manage the resource group itself. This ensures that members of the Developers group can work within the Dev resource group to create Logic Apps without granting them broader permissions within the subscription. So, the solution provided meets the goal effectively.

6f80f6cOption: B

Answer is B, you are now managing the Resource Group, not the Logic App

bobothewisemanOption: A

The Logic App Contributor role has RBAC role below Microsoft.Logic/* Manages Logic Apps resources. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/integration#logic-app-contributor

a6bd45eOption: B

In Azure, the Logic App Contributor role does not inherently have the permissions to create new logic apps. The Logic App Contributor role allows users to manage logic apps but not create them. Specifically, this role includes permissions to read, write, and delete logic apps, but it lacks the permission required to create new ones, which is part of the broader Logic App Operator role or higher. To create new logic apps, users generally need either the Logic App Operator role or a custom role with the following specific permission: Microsoft.Logic/workflows/write. This permission is necessary to create logic apps and is included in the Logic App Operator role or higher-level roles like Contributor or Owner.

MakoporoshOption: B

No: While the Logic App Contributor role is useful for managing existing logic apps, it does not grant permissions to create new logic apps or other Azure resources. Therefore, to meet the requirement of allowing the Developers group to create Azure Logic Apps in the Dev resource group, you must assign them the Contributor role at the resource group level.

apazman123Option: B

Contributor and Logic App Contributor are different

004b54bOption: B

Based on https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app-contributor, answer should be B. No

MSExpertGEROption: B

B ( NO ) is correct. to create resources in a resource group, you need to be a Contibutor (Built-in Role). The Logic Apps Contributor may change certain settings on an individual Logic App Instance, but not create a new Logic App resource! https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/integration#logic-app-contributor

3c5adceOption: A

While the Logic App Standard Developer role provides more specific permissions tailored for developers working with Logic Apps, the Logic App Contributor role still grants the necessary permissions to create and manage logic apps within the specified resource group. Therefore, both solutions meet the goal of providing the Developers group with the ability to create Azure Logic Apps in the Dev resource group.

ShifOption: B

Only logic app standard developer will be able to do this. Hence NO

3c5adce

KiflaOption: A

Correct answer: A Task is to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Logic App Contributor role has the following permission: Microsoft.Resources/deployments/* Create and manage a deployment This would allow Dev group to create Azure logic apps in the Dev RG. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/integration#logic-app-contributor

skywalkerOption: B

Role Description Logic App Contributor You can manage logic app workflows, but you can't change access to them. Logic App Operator You can read, enable, and disable logic app workflows, but you can't edit or update them. Contributor You have full access to manage all resources, but you can't assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries. For example, suppose you have to work with a logic app workflow that you didn't create and authenticate connections used by that logic app workflow. Your Azure subscription requires Contributor permissions for the resource group that contains that logic app resource. If you create a logic app resource, you automatically have Contributor access.

RemmyTOption: B

B. NO Logic App Contributor cannot create Azure logic apps in a resource group. Have only Read permissions on a Resource Group. roleName: Logic App Contributor, description: Lets you manage logic app, but not access to them. actions: Microsoft.Authorization/*/read, Microsoft.Logic/*, Microsoft.Resources/deployments/*, Microsoft.Resources/subscriptions/resourceGroups/read, Microsoft.Storage/storageAccounts/listkeys/action, Microsoft.Storage/storageAccounts/read, Microsoft.Support/*, Microsoft.Web/connectionGateways/*, Microsoft.Web/connections/*, Microsoft.Web/customApis/*,

Jobalos009Option: A

ANSWER: A The developers can create Logic Apps with the Logic App Contributor role Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/integration#logic-app-contributor