az logicapp connection managed

Note

This reference is part of the logicapp extension for the Azure CLI (version 2.67.0 or higher). The extension will automatically install the first time you run an az logicapp connection managed command. Learn more about extensions.

Create managed API connections for deployed Logic Apps Standard sites.

Commands

Name	Description	Type	Status
az logicapp connection managed create	Create and wire a managed API connection using distinct connection and app names.	Extension	GA

az logicapp connection managed create

Create and wire a managed API connection using distinct connection and app names.

--name always names the connection; --logic-app-name names the consuming site. Uses the same guarded managed API/OAuth/identity creation as legacy connection create --managed-api. That legacy mode is deprecated but retains its original --name meaning throughout this preview; removal requires an announced breaking change. Does not broaden identity ownership or cleanup. OAuth failures may retain connection/access-policy resources. Inspect the reported state before retrying; timeout does not promise resource removal.

az logicapp connection managed create --auth-mode {managed-identity, oauth, raw, service-principal}
                                      --connector
                                      --location
                                      --logic-app-name
                                      --name
                                      --resource-group
                                      [--acquire-policy-token]
                                      [--change-reference]
                                      [--consent-timeout]
                                      [--display-name]
                                      [--force]
                                      [--no-browser]
                                      [--parameter]
                                      [--parameter-set]
                                      [--secret-parameter]
                                      [--user-assigned-identity]

Examples

Create an Azure Blob connection for the site's managed identity.

az logicapp connection managed create -g my-rg --logic-app-name my-app -n blobProd --connector azureblob -l eastus --auth-mode managed-identity

Create an Office 365 connection with browser consent.

az logicapp connection managed create -g my-rg --logic-app-name my-app -n outlook --connector office365 -l eastus --auth-mode oauth

Required Parameters

--auth-mode

Authentication used by the connection. OAuth requires browser consent; managed-identity uses an identity already assigned to the app.

Property	Value
Accepted values:	managed-identity, oauth, raw, service-principal

--connector

Managed API connector name or ARM managedApis id.

--location -l

Location. Values from: az account list-locations. You can configure the default location using az configure --defaults location=<location>.

--logic-app-name

Logic App Standard site that will use the connection.

--name -n

Managed API connection name.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--acquire-policy-token

Acquiring an Azure Policy token automatically for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--change-reference

The related change reference ID for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--consent-timeout

OAuth consent timeout in seconds, default 300. On failure resources may be retained; inspect before retrying.

--display-name

Display name. Defaults to --name.

--force

Replace existing managed connection wiring with revision and ownership checks.

Property	Value
Default value:	False

--no-browser

Print the OAuth consent URL instead of opening a browser. Loopback callback still required.

Property	Value
Default value:	False

--parameter

Non-secret NAME=VALUE connection parameter, repeatable.

--parameter-set

Connector parameter set name.

--secret-parameter

Secret parameter name. The value is read from standard input, never the command line.

--user-assigned-identity

Resource id of an identity already assigned to the app. Defaults to the system identity.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False