Logic app contributor has below action permitted: Microsoft.Resources/deployments/* -- Create and manage a deployment The above action confirms that this role can create new logic apps. References: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#logic-app- contributor https://github.com/MicrosoftDocs/azure-docs/issues/33585