Associate user assigned managed identity to logic app using PowerShell

Question

Hello,

I know how to Associate an user assigned managed identity to logic app in web interface but, I want to put the creation and the association in a script with PowerShell.

I have try to look in the result of 'Get-AzLogicApp' for a logic app with a managed identity. But I can't find any trace of the MI in the cmdlet result.

Does anyone know if there is a way to do it with powershell?

Answer 1

Hi @Jérôme,

I don't believe the Az.LogicApp module supports setting a managed identity to the Logic App. If you still want to use PowerShell, then you'll have to go about in an ARM template fashion as explained in Enable system-assigned identity in an ARM template.

You should be able to use Invoke-AzRestMethod command setting the path, i.e. /subscriptions/{subscription}/resourceGroups/{rg}/providers/Microsoft.Logic/workflows/{logicappname}/ to the logic app and POSTing the parameters of the identity as a body. I couldn't find a specific example of this, but another option you could try is using New-AzResource to make the update. Same principal, you're manually updating the actual resource properties. It would look something like:

$identityId = (Get-AzUserAssignedIdentity -ResourceGroupName <ResourceGroupName> -Name <IdentityName>).Id
$logicAppResourceId = (Get-AzLogicApp -ResourceGroupName <ResourceGroupName> -Name <LogicAppName>).ResourceId
$identityType = "UserAssigned"
$identity = @{
    type = $identityType
    userAssignedIdentities = @{
        $identityId = @{
            clientId = "<ClientIdOfTheIdentity>"
            principalId = "<PrincipalIdOfTheIdentity>"
        }
    }
}

New-AzResource -ResourceId $logicAppResourceId -Properties $identity -Force

Answer 2

$subscriptionId = "<Your Subscription ID>"
$resourceGroupName = "<Logic App Resource Group>"
$logicAppName = "<Logic App Name>" 
$userAssignedIdentityName = "<Managed Identity Name>"  

# Get Resource IDs
$userAssignedIdentityResourceId =  "/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.ManagedIdentity/userAssignedIdentities/$userAssignedIdentityName"
$logicAppResourceId = "/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.Logic/workflows/$logicAppName"

# Assign the user-assigned identity to the Logic App
Set-AzLogicApp -ResourceId $logicAppResourceId -IdentityType UserAssigned -Identity $userAssignedIdentityResourceId

is it what you are looking for or please can you clarify what you need