AZ-204 Certification Practice Question #249

Question

You need to correct the Azure Logic app error message.
Which configuration values should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

To successfully call an Azure Function from a Consumption Logic App workflow using managed identity authentication, the function's authorization/authentication level must be configured as **anonymous**. Setting it to "function" or "admin" causes the call to fail with a `400 BadRequest` error because the Azure Function host intercepts and rejects the request before the managed identity token can be processed at the Azure AD level. For the identity, the logic app uses a **system-assigned** managed identity by default to obtain Entra ID access tokens to call the function, aligning with the principle of least privilege as it is tied to the lifecycle of the single Logic App instance.

More AZ-204 practice questions