Make Microsoft.Logic/integrationAccounts/join/action permission not required for editing existing workflow
I need to give users access to edit specific Azure Logic App workflows. I find I can support this with the Logic App Contributor role. At times, I have workflows that contain an XML Validation action. I do want users to be able to edit business rules before and after that action, and even configure the action such as selecting a different XSD. However, I do not want them to be able to configure the Integration account that supports the XML Validation action, or even have a read-only view to the Integration account. When I have such an action, a would-be editor is blocked with the error:
it does not have permission to perform action 'Microsoft.Logic/integrationAccounts/join/action' on the linked scope(s)
I want to simplify set up and not require a custom role including the permission Microsoft.Logic/integrationAccounts/join/action Why is saving the logic app even requiring this? It feels like it is re-joining the already attached Integration Account, which is an unnecessary step that should be simplified away.