az logicapp identity

Note

This reference is part of the logicapp extension for the Azure CLI (version 2.67.0 or higher). The extension will automatically install the first time you run an az logicapp identity command. Learn more about extensions.

Manage the managed identity of a deployed Logic App Standard site.

Commands

Name	Description	Type	Status
az logicapp identity assign	Assign a managed identity to a deployed Logic App.	Extension	GA
az logicapp identity remove	Remove a managed identity from a deployed Logic App.	Extension	GA
az logicapp identity show	Show the managed identity of a deployed Logic App.	Extension	GA

az logicapp identity assign

Assign a managed identity to a deployed Logic App.

Additive: assigning a user-assigned identity leaves an existing system-assigned identity in place. Assigning an identity is only half of enabling an identity-based connection; the identity still needs a data-plane role assignment on the target resource.

az logicapp identity assign --name
                            --resource-group
                            [--acquire-policy-token]
                            [--change-reference]
                            [--system-assigned]
                            [--user-assigned]

Examples

Enable the system-assigned identity.

az logicapp identity assign --resource-group orders-rg --name orders-app --system-assigned

Attach a user-assigned identity.

az logicapp identity assign --resource-group orders-rg --name orders-app --user-assigned /subscriptions/0000/resourceGroups/orders-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/orders-identity

Required Parameters

--name -n

Name of the Logic App Standard site.

--resource-group -g

Name of resource group containing the Logic App Standard site.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--acquire-policy-token

Acquiring an Azure Policy token automatically for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--change-reference

The related change reference ID for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--system-assigned

Apply the change to the system-assigned managed identity.

Property	Value
Default value:	False

--user-assigned

One or more full resource ids of user-assigned managed identities. Repeatable.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az logicapp identity remove

Remove a managed identity from a deployed Logic App.

Removes only what is named, leaving other identities assigned. Workflows using an identity-based connection will start failing authentication once their identity is removed.

az logicapp identity remove --name
                            --resource-group
                            [--acquire-policy-token]
                            [--change-reference]
                            [--system-assigned]
                            [--user-assigned]

Examples

Remove the system-assigned identity.

az logicapp identity remove --resource-group orders-rg --name orders-app --system-assigned

Required Parameters

--name -n

Name of the Logic App Standard site.

--resource-group -g

Name of resource group containing the Logic App Standard site.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--acquire-policy-token

Acquiring an Azure Policy token automatically for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--change-reference

The related change reference ID for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--system-assigned

Apply the change to the system-assigned managed identity.

Property	Value
Default value:	False

--user-assigned

One or more full resource ids of user-assigned managed identities. Repeatable.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az logicapp identity show

Show the managed identity of a deployed Logic App.

Reports type None when the app has no identity, rather than printing nothing.

az logicapp identity show --name
                          --resource-group

Examples

Show the identity, including the principal id to grant roles to.

az logicapp identity show --resource-group orders-rg --name orders-app

Required Parameters

--name -n

Name of the Logic App Standard site.

--resource-group -g

Name of resource group containing the Logic App Standard site.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False