title: Azure Storage - Allowed Microsoft Service when Firewall is set
body: <p>I am trying to connect a public logic app (not ISE environment) to a storage account that is restricted to a Vnet.
  According to the Storage account documentation access should be possible using a system managed identity.</p>
  <p>However I just tried in 3 different subscriptions and the result is always the same:</p>
  <pre><code>    {
      &quot;status&quot;: 403,
      &quot;message&quot;: &quot;This request is not authorized to perform this operation.\r\nclientRequestId: 2ada961e-e4c5-4dae-81a2-520397f277a6&quot;,
      &quot;error&quot;: {
      &quot;message&quot;: &quot;This request is not authorized to perform this operation.&quot;
      },
      &quot;source&quot;: &quot;azureblob-we.azconn-we-01.p.azurewebsites.net&quot;
      }
  </code></pre>
  <p>Already provided access with different IAM roles, including owner. This feels like the service that should be allowed according to the documentation is not being allowed.</p>
  <blockquote>
  <p>The Allow trusted Microsoft services... setting also allows a
  particular instance of the below services to access the storage
  account, if you explicitly assign an RBAC role to the system-assigned
  managed identity for that resource instance. In this case, the scope
  of access for the instance corresponds to the RBAC role assigned to
  the managed identity.</p>
  <p>Azure Logic Apps Microsoft.Logic/workflows Enables logic apps to
  access storage accounts</p>
  </blockquote>
  <p>[https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security#exceptions][1]</p>
  <p>What am I doing wrong?</p>
  <p>Added screenshots:</p>
  <p><a href="https://i.stack.imgur.com/CfwJK.png" rel="nofollow noreferrer">https://i.stack.imgur.com/CfwJK.png</a></p>
  <p><a href="https://i.stack.imgur.com/tW7k9.png" rel="nofollow noreferrer">https://i.stack.imgur.com/tW7k9.png</a></p>
  <p><a href="https://i.stack.imgur.com/Lxyqd.png" rel="nofollow noreferrer">https://i.stack.imgur.com/Lxyqd.png</a></p>
  <p><a href="https://i.stack.imgur.com/Sp7ZV.png" rel="nofollow noreferrer">https://i.stack.imgur.com/Sp7ZV.png</a></p>
  <p><a href="https://i.stack.imgur.com/Hp9JG.png" rel="nofollow noreferrer">https://i.stack.imgur.com/Hp9JG.png</a></p>
  <p><a href="https://i.stack.imgur.com/rRbau.png" rel="nofollow noreferrer">https://i.stack.imgur.com/rRbau.png</a></p>