Azure Container app connectivity issue

To fix the "RBAC Denied" error, assign the "Contributor" role to the managed identity of your Function App and Logic App on the Container App directly.

Steps:

1. Go to your Container App in Azure Portal.
2. Under Access Control (IAM), click on Add role assignment.
3. In the Role dropdown, select Contributor.
4. Under Assign access to, select Managed identity.
5. In the Select box, search for and select the managed identity of your Function App.
6. Click Save to apply.
7. Repeat the same for the managed identity of your Logic App.

This will provide the necessary permissions for the Logic App and Function App to interact with the Container App.

Important: If the error persists after this, ensure both managed identities are enabled and check that there are no network restrictions (like VNet or private endpoints) blocking access.

@Chakraborty, Shubham Thanks for posting your question in Microsoft Q&A, apologize for any inconvenience caused on this.

I understand that you are facing RBAC permissions while calling function App (running on container app environment) from logic apps.

Could you please try adding any of the below permissions on the Logic app managed identity and let us know if you are still facing the issues.

1. Contributor role at resource group level to access all the resources inside the resource group
2. Website Contributor to that function app managed identity to limit and access the specific function app.

Refer to this documentation on how assign roles from portal.

Hello @VenkateshDodda-MSFT

We have tried with giving the mentioned RBAC permissions on the respective managed identity however we are getting the same "RBAC Denied" error, while performing the GET calls from Logic App to Container App.

Please help us with the solution.