Any low permission User uses a shared PowerApps to kick off Flow (created by admin or different)
Flow uses Create Job (from Azure Automation) to run a Powershell based runbook to create an Azure VM
Given I have confirmed that step 2 is doable, I want to ask:
Is this setup feasible
Does this shared Flow have permission related shortcomings?
I remember reading on another topic that impersonation is an issue, so i'm not sure if this will be an issue too (though i'm not sure this will be related to impersonation at all). Note that there are some other steps, so a PowerApps only approach will not work.