Cannot connect to Storage Container from standard Logic App with (status 403)

Question

Hi! I have tried to connect to a container on a storage account from my standard logic app but cant get it to work.

I have created a connection in logic apps that uses Logic Apps Managed Identity and I have also set the rest of the config so that we target the right storage account and container. The role "Contributor" have been assigned to my logic app in the storage account and we should be good to go. But when I try to test run my logic app, i get the error down below when i try to create a blob. Do you know what i am missing here? I have no firewalls nor any vnets.

"status": 403,
"message": "This request is not authorized to perform this operation using this permission.\r\nclientRequestId: xxxxxxxxxxxxxxxxxxx",
"error": {
"message": "This request is not authorized to perform this operation using this permission."
},

Best regards.

Answer 1

Hi @Sebastian Bäckström Pino ,

Please provide Storage Blob Data Contributor access to the managed identity and check if it works.

https://learn.microsoft.com/en-us/azure/logic-apps/create-managed-service-identity?tabs=consumption#assign-managed-identity-role-based-access-in-the-azure-portal

Feel free to reach out to me if you have any questions or concerns.