Azure Automation and Managed Identities

Azure Automation uses Run As accounts to authenticate and manage resources in an Azure subscription. In this video, we review using Managed Identities in Azure Automation (preview) to control access to Azure resources. The video then provides an Azure Automation Tutorial on creating an Azure Automation account, configuring a Managed Identity, setting RBAC permissions, and then creating a runbook that shuts down Azure Virtual Machines on a tag value.

Links
GitHub Code:

[theako]

Thank you very much for this. This really explained it well for me!

[jasoneastwood]

That was easier than I thought, thanks for sharing!

[girishwalawalkar]

Thanks a lot, its Gr8 Video and so simple to understand.

[WaenglTaengl]

Very good tutorial. Thank you! :) #subbed

[dominicnike]

Thank you for this simple steps which you demo and i must say this is a very good step to follow but i have a question to ask i don't know if you will be of good help to my question I am having issues on how to restart a webapp service in azure where i want to include Manage Identity to be able to restart the webapp service but don't know if you have a demo or a bicep code for this?

[kannardasan]

Hello Sir, I am getting below error. Cannot bind argument to parameter ;subscription ID" because its Null.

[Avean]

Any advice on connecting to graph with this? Added the from the gallery and using Import-Module but it fails to find the module when importing. Tried so many things now.

[Beansswtf]

Maybe useful for someone, If you are using a hybrid worker VM group to run your runbooks, the VM itself needs to have the managed identity enabled and rbac configured, NOT on the automation account.

[mithilanavishka]

is azure rm power shell module are not working now ? that's why you used new AZ modules or your script is based on new AZ module ?

[ytzbfyd]

Hi Travis, great video. Is it possible to create an azure vm using CLI from my TP using managed identity?

[mosksky]

Ty Travis! How do you suggest using automation account for taking care password expiration of SA when joined to AD (as computer object)? That will require to run as a user and not as SPN (with MSI)
`
-RotateToKerbKey kerb2 `
-ResourceGroupName `
-StorageAccountName "xxxxsa"

[leonardolemos]

Hi Travis, can Azure automation account be used to run a script at the OS level of a VM?

[dimitriskrallis]

Great video Travis! Btw I am trying to get the object id from the managed Identity from the Automation account using powershell.
How can I do this ?
I use:



$AzureContext = (Connect-AzAccount -Identity).context
but how can I retrieve the Managed Identity objectID ?

[PremKumar-ipeo]

How to start VMS with the managed Identity.?

[plusvision]

Can't we just use "stop-AzVM" command?

[SanjeevKumar-tkzz]

I could not able to find link for code, could you please assist?