Originally reported here: https://github.com/Azure/bicep/issues/949 Appears to be the case for all apiVersions, but a PUT with the identity property will work as expected. Here's their template sample from docs: https://docs.microsoft.com/en-us/azure/templates/microsoft.logic/2019-05-01/workflows