Merge pull request #156520 from v-dturcaso/1837673-a

trying again

Author: PMEds28

articles/automation/TOC.yml

@@ -72,6 +72,8 @@
               href: enable-managed-identity-for-automation.md
             - name: Disable managed identity
               href: disable-managed-identity-for-automation.md
+            - name: Troubleshoot managed identity
+              href: troubleshoot/managed-identity.md
         - name: Run As account
           items:
             - name: Create Run As account

articles/automation/enable-managed-identity-for-automation.md

@@ -3,7 +3,7 @@ title: Enable a managed identity for your Azure Automation account (preview)
 description: This article describes how to set up managed identity for Azure Automation accounts.
 services: automation
 ms.subservice: process-automation
-ms.date: 04/20/2021
+ms.date: 04/28/2021
 ms.topic: conceptual
 ---
 # Enable a managed identity for your Azure Automation account (preview)
@@ -219,6 +219,8 @@ print(response.text)
 
 ## Next steps
 
+- If your runbooks aren't completing successfully, review [Troubleshoot Azure Automation managed identity issues (preview)](troubleshoot/managed-identity.md).
+
 - If you need to disable a managed identity, see [Disable your Azure Automation account managed identity (preview)](disable-managed-identity-for-automation.md).
 
-- For an overview of Azure Automation account security, see [Automation account authentication overview](automation-security-overview.md).
+- For an overview of Azure Automation account security, see [Automation account authentication overview](automation-security-overview.md).

articles/automation/troubleshoot/managed-identity.md

@@ -0,0 +1,66 @@
+---
+title: Troubleshoot Azure Automation managed identity issues (preview)
+description: This article tells how to troubleshoot and resolve issues when using a managed identity with an Automation account.
+services: automation
+ms.subservice:
+ms.date: 04/28/2021
+ms.author: v-dturcaso
+ms.topic: troubleshooting
+---
+
+# Troubleshoot Azure Automation managed identity issues (preview)
+
+This article discusses solutions to problems that you might encounter when you use a managed identity with your Automation account. For general information about using managed identity with Automation accounts, see [Azure Automation account authentication overview](../automation-security-overview.md#managed-identities-preview).
+
+## Scenario: Attempt to use managed identity with Automation account fails
+
+### Issue
+
+When you try to work with managed identities in your Automation account, you encounter an error like this:
+
+```error
+Connect-AzureRMAccount : An error occurred while sending the request. At line:2 char:1 + Connect-AzureRMAccount -Identity + 
+CategoryInfo : CloseError: (:) [Connect-AzureRmAccount], HttpRequestException + FullyQualifiedErrorId : Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand
+```
+
+### Cause
+
+The most common cause for this is that you didn't enable the identity before trying to use it. To verify this, run the following PowerShell runbook in the affected Automation account.
+
+```powershell
+resource= "?resource=https://management.azure.com/"
+$url = $env:IDENTITY_ENDPOINT + $resource
+$Headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
+$Headers.Add("X-IDENTITY-HEADER", $env:IDENTITY_HEADER)
+$Headers.Add("Metadata", "True")
+
+try
+{
+    $Response = Invoke-RestMethod -Uri $url -Method 'GET' -Headers $Headers
+}
+catch
+{
+    $StatusCode = $_.Exception.Response.StatusCode.value__
+    $stream = $_.Exception.Response.GetResponseStream()
+    $reader = New-Object System.IO.StreamReader($stream)
+    $responseBody = $reader.ReadToEnd()
+    
+    Write-Output "Request Failed with Status: $StatusCode, Message: $responseBody"
+}
+```
+
+If the issue is that you didn't enable the identity before trying to use it, you should see a result similar to this:
+
+`Request Failed with Status: 400, Message: {"Message":"No managed identity was found for Automation account xxxxxxxxxxxx"}`
+
+### Resolution
+
+You must enable an identity for your Automation account before you can use the managed identity service. See [Enable a managed identity for your Azure Automation account (preview)](../enable-managed-identity-for-automation.md)
+
+## Next steps
+
+If this article doesn't resolve your issue, try one of the following channels for additional support:
+
+* Get answers from Azure experts through [Azure Forums](https://azure.microsoft.com/support/forums/).
+* Connect with [@AzureSupport](https://twitter.com/azuresupport). This is the official Microsoft Azure account for connecting the Azure community to the right resources: answers, support, and experts.
+* File an Azure support incident. Go to the [Azure support site](https://azure.microsoft.com/support/options/), and select **Get Support**.