Microsoft Azure Administrator (AZ104) Practice Exam

You are tasked with providing a group named Developers the ability to create Azure logic apps within a specific resource group. If you assign the Logic App Contributor role to the Developers group on the resource group, will this be sufficient?

1. Yes

2. No

3. Only with additional permissions

4. Depends on the Azure subscription

The correct answer is: Yes

Assigning the Logic App Contributor role to the Developers group on the specific resource group will indeed provide the necessary permissions for the members of that group to create and manage Azure Logic Apps within that resource group. The Logic App Contributor role is designed specifically for managing Azure Logic Apps, allowing users to create, read, update, and delete logic apps without granting them permissions to manage other resources in the resource group. This approach aligns with the principle of least privilege, ensuring that the Developers group has the necessary access to perform their tasks related to Logic Apps, while preventing unnecessary access to other resource types or management actions that they do not require. Therefore, by assigning the Logic App Contributor role appropriately at the resource group level, users in the Developers group will have the right level of access to perform their responsibilities effectively.