> ## Documentation Index > Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt > Use this file to discover all available pages before exploring further. # AZLogicAppContributor > The Logic Contributor role grants full control of the target Logic App. This includes the ability to execute arbitrary commands on the Logic App. Applies to BloodHound Enterprise and CE ## Abuse Info Currently you need access to the portal GUI to execute this abuse. The abuse involves adding or modifying an existing logic app to coerce the logic app into sending a JWT for its managed identity service principal to a web server you control. You can see a full walkthrough for executing that abuse in this blog post: [Andy Robbins - Managed Identity Attack Paths, Part 2: Logic Apps](https://medium.com/p/52b29354fc54) ## Opsec Considerations This will depend on which particular abuse you perform, but in general Azure will create a log event for each abuse. ## References * [https://github.com/BloodHoundAD/BARK](https://github.com/BloodHoundAD/BARK) * [https://medium.com/p/52b29354fc54](https://medium.com/p/52b29354fc54) * [https://specterops.io/blog/2023/04/18/introducing-bloodhound-4-3-get-global-admin-more-often/](https://specterops.io/blog/2023/04/18/introducing-bloodhound-4-3-get-global-admin-more-often/)