Skip to content

Commit ec609fd

Browse files
Merge pull request #271944 from ecfan/patch-1
Clarify restrictions on using a managed identity with Service Bus connector
2 parents 55ae69b + 8ff2010 commit ec609fd

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

articles/connectors/connectors-create-api-servicebus.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: logic-apps
55
ms.suite: integration
66
ms.reviewer: estfan, azla
77
ms.topic: how-to
8-
ms.date: 02/28/2024
8+
ms.date: 04/11/2024
99
ms.custom: engagement-fy23
1010
---
1111

@@ -52,9 +52,13 @@ The Service Bus connector has different versions, based on [logic app workflow t
5252

5353
* If your logic app resource uses a managed identity for authenticating access to your Service Bus namespace and messaging entity, make sure that you've assigned role permissions at the corresponding levels. For example, to access a queue, the managed identity requires a role that has the necessary permissions for that queue.
5454

55-
Each managed identity that accesses a *different* messaging entity should have a separate connection to that entity. If you use different Service Bus actions to send and receive messages, and those actions require different permissions, make sure to use different connections.
55+
* Each logic app resource should use only one managed identity, even if the logic app's workflow accesses different messaging entities.
5656

57-
For more information about managed identities, review [Authenticate access to Azure resources with managed identities in Azure Logic Apps](../logic-apps/create-managed-service-identity.md).
57+
* Each managed identity that accesses a queue or topic subscription should use its own Service Bus API connection.
58+
59+
* Service Bus operations that exchange messages with different messaging entities and require different permissions should use their own Service Bus API connections.
60+
61+
For more information about managed identities, see [Authenticate access to Azure resources with managed identities in Azure Logic Apps](../logic-apps/create-managed-service-identity.md).
5862

5963
* By default, the Service Bus built-in connector operations are *stateless*. To run these operations in stateful mode, see [Enable stateful mode for stateless built-in connectors](../connectors/enable-stateful-affinity-built-in-connectors.md).
6064

0 commit comments

Comments
 (0)