Merge pull request #184863 from ecfan/user-assigned

Azure Logic Apps: User-assigned identity support in Standard

Author: denrea

articles/logic-apps/create-managed-service-identity.md

@@ -5,7 +5,7 @@ services: logic-apps
 ms.suite: integration
 ms.reviewer: rohithah, rarayudu, azla
 ms.topic: reference
-ms.date: 11/16/2021
+ms.date: 01/12/2022
 ---
 
 # Limits and configuration reference for Azure Logic Apps
@@ -379,16 +379,10 @@ For more information, review the following documentation:
 
 | Name | Limit |
 |------|-------|
-| Managed identities per logic app | Either the system-assigned identity or 1 user-assigned identity |
+| Managed identities per logic app resource | - Consumption: Either the system-assigned identity *or* only one user-assigned identity <p>- Standard: The system-assigned identity *and* any number of user-assigned identities <p>**Note**: By default, a **Logic App (Standard)** resource has the system-assigned managed identity automatically enabled to authenticate connections at runtime. This identity differs from the authentication credentials or connection string that you use when you create a connection. If you disable this identity, connections won't work at runtime. To view this setting, on your logic app's menu, under **Settings**, select **Identity**. |
 | Number of logic apps that have a managed identity in an Azure subscription per region | 1,000 |
 |||
 
-> [!NOTE] 
-> By default, a Logic App (Standard) resource has its system-assigned managed identity automatically enabled to 
-> authenticate connections at runtime. This identity differs from the authentication credentials or connection 
-> string that you use when you create a connection. If you disable this identity, connections won't work at 
-> runtime. To view this setting, on your logic app's menu, under **Settings**, select **Identity**.
-
 <a name="integration-account-limits"></a>
 
 ## Integration account limits

articles/logic-apps/logic-apps-limits-and-config.md

@@ -1157,7 +1157,13 @@ When the [managed identity](../active-directory/managed-identities-azure-resourc
 
 * The **Logic App (Consumption)** resource type can use the system-assigned identity or a *single* manually created user-assigned identity.
 
-* The **Logic App (Standard)** resource type can use only the system-assigned identity, which is automatically enabled. The user-assigned identity is currently unavailable.
+* The **Logic App (Standard)** resource type supports having the [system-assigned managed identity *and* multiple user-assigned managed identities](create-managed-service-identity.md) enabled at the same time, though you still can only select one identity to use at any time.
+
+  > [!NOTE]
+  > By default, the system-assigned identity is already enabled to authenticate connections at run time. 
+  > This identity differs from the authentication credentials or connection string that you use when you 
+  > create a connection. If you disable this identity, connections won't work at run time. To view 
+  > this setting, on your logic app's menu, under **Settings**, select **Identity**.
 
 1. Before your logic app can use a managed identity, follow the steps in [Authenticate access to Azure resources by using managed identities in Azure Logic Apps](../logic-apps/create-managed-service-identity.md). These steps enable the managed identity on your logic app and set up that identity's access to the target Azure resource.