CmdID / az / az logicapp / az logicapp connection / az logicapp connection acl
az logicapp connection acl add
Grant an Entra identity access to a managed API connection. Azure CLI extensions reference
Takes the object id of the principal, normally the principalId reported by az logicapp identity show. Refuses on V1 connections, which cannot hold access policies and cannot be converted.
1 example 6 options Its page in the Azure CLI extensions reference
Examples
Grant a Logic App's system-assigned identity access to a connection.
az logicapp connection acl add -g rg-lacli-ri2bg8 --connection blobProd --object-id 00000000-0000-0000-0000-000000000000Identify-gResource group containing the connection.--connectionManaged API connection name.--object-idEntra object id (principal id) of the identity being granted access.Options
--connectionManaged API connection name.--location, -lAccess policy location.--object-idEntra object id (principal id) of the identity being granted access.--policyAccess policy name.--resource-group, -gResource group containing the connection.--tenant-idTenant of the principal.