Cannot Access Blob Storage from Logic app with Private Network

Question

Cannot Access Blob Storage from Logic app with Private Network

Raghav Manchanda 0

Hi Team,

I’m encountering an issue where my Logic App cannot access the storage account when it has private access. Despite adding the Logic App to the same virtual network as the storage account, the problem persists.

1 answer

Your answer

Answer 1

Hi @Raghav Manchanda Greetings! Welcome to Microsoft Q&A forum. Thank you for posting this question here.

You would need to create System Identity for your Logic App and grant Storage Blob Data Contributor role to this identity to allow the logic app to access the contents of the storage account container. Please refer the documentation Create role assignment for logic app that walks you through the steps on how you can create the identity and assign the needed permissions to this identity.

Once the identity is created and assigned appropriate permissions, you would need to create a connection in logic app for blob storage with the Authentication type set as Logic Apps Managed Identity. You can give a connection name of your choosing and provide the storage account name and other needed details based on your action you choose. Below is a sample trigger where I have used managed identity to trigger my logic app.

enter image description here

Your logic app should now be able to access the storage account without any issues.

Optionally, you can follow the steps in the article section Configure storage account access to allow access from your computer to perform any additional tests you may need.

Hope this helps! Please let us know if you need any additional assistance or further clarification.

If the response helped, please do click Accept Answer and Yes for the answer provided. Doing so would help other community members with similar issue identify the solution. I highly appreciate your contribution to the community.

Raghav Manchanda 0 Reputation points

2024-10-30T09:19:57.4+00:00

Hi @LeelaRajeshSayana-MSFT ,

Thank you so much for the response but the actual issue is a little bit different. I've created the logic app in the Same Storage Account where public access is disabled. But I'm neither able to create the workflow in that and even if I create it when the logic app is in some other storage account, the workflow will not be able to get the blob when the public network access it disabled. The Private Endpoints are there, and the resources are there in the same virtual network but still there is some issue which is preventing the creation of Workflow and Accessing the blobs.
LeelaRajeshSayana-MSFT 17,866 Reputation points Moderator

2024-10-31T17:30:07.5266667+00:00

@Raghav Manchanda Thanks for adding additional context. You might need to enable some additional configurations to allow your Logic App access the storage account. Please refer the following two articles that might guide you with granting access

Deploying Standard Logic App to Storage Account behind Firewall using Service or Private Endpoints

Azure Standard Logic App with Secured (Private) Storage Account

Please keep me posted if you continue to face this issue even after making the suggested recommendations from the article.

Kindly share any error messages displayed on the portal or in the logs when you try to access the storage account through the logic app.

Share via

Cannot Access Blob Storage from Logic app with Private Network

1 answer

Your answer