Authenticating into Azure DevOps from a Logic App

Question

I need to talk to my Azure DevOps instance from one of my Azure Logic Apps in order to perform some routine tasks (mainly, around reading a list of users through Users - List API Call). Currently, I'm authenticating using a personal access token (PAT), however I wonder if there's a way to permission the Logic App in Azure DevOps in a way that wouldn't depend on my personal account (like PAT does). Any idea?

For example in Azure Automation, I can permission access for the logic app by the app's Identity Object ID, and access Azure Automation services through the REST API using the 'Managed Identity' as the Authentication type (in the HTTP action). Is there something like that possible in Azure DevOps?

Answer 1

It seems impossible to create something like "Managed Identity" in azure devops to permission logic apps access to azure devops instance.

You can add azure devops connector in logic apps to access azure devops services. You can refer to this thread

However i tested and found i cannot list Users by sending http request to azure devops, for microsoft host user ad data in different server domain "vssps". You might still need to use http request to call list User api and use basic Authentication(with user name and password) or PAT Authentication.