Azure Container app connectivity issue

Chakraborty, Shubham 60

Hi Team,

We are facing connectivity issue in Container App, that after enabling the connectivity from Logic app and Function app to container app (workload profile or consumption-only tier). We are getting the "RBAC Denied" error, we have tried to provide reader access to managed identity of function app and logic app on Container App but the error is still same while making call from Logic app.

We need assistance in how to get this issue fixed ?

Robina 260 Reputation points

2024-12-20T18:43:28.09+00:00
To fix the "RBAC Denied" error, assign the "Contributor" role to the managed identity of your Function App and Logic App on the Container App directly.

Steps:

Go to your Container App in Azure Portal.

Under Access Control (IAM), click on Add role assignment.

In the Role dropdown, select Contributor.

Under Assign access to, select Managed identity.

In the Select box, search for and select the managed identity of your Function App.

Click Save to apply.

Repeat the same for the managed identity of your Logic App.

This will provide the necessary permissions for the Logic App and Function App to interact with the Container App.

Important: If the error persists after this, ensure both managed identities are enabled and check that there are no network restrictions (like VNet or private endpoints) blocking access.
VenkateshDodda-MSFT 23,141 Reputation points Microsoft Employee

2024-12-23T05:16:17.6033333+00:00
@Chakraborty, Shubham Thanks for posting your question in Microsoft Q&A, apologize for any inconvenience caused on this.

I understand that you are facing RBAC permissions while calling function App (running on container app environment) from logic apps.

Could you please try adding any of the below permissions on the Logic app managed identity and let us know if you are still facing the issues.

Contributor role at resource group level to access all the resources inside the resource group

Website Contributor to that function app managed identity to limit and access the specific function app.

Refer to this documentation on how assign roles from portal.
Chakraborty, Shubham 60 Reputation points

2024-12-23T12:20:05.22+00:00

Hello @VenkateshDodda-MSFT

We have tried with giving the mentioned RBAC permissions on the respective managed identity however we are getting the same "RBAC Denied" error, while performing the GET calls from Logic App to Container App.

Please help us with the solution.
VenkateshDodda-MSFT 23,141 Reputation points Microsoft Employee

2024-12-23T14:29:13.9233333+00:00
@Chakraborty, Shubham Could you please help us in sharing more details.

Complete error message

Are you using Built-in/in App Azure Functions connector? or are you triggering the function using http action.

Also, I have reached out to you over private message could you please share requested details.

Share via

Azure Container app connectivity issue

Your answer