Skip to content

Commit b9a36c8

Browse files
committed
minor edit
1 parent a01ad38 commit b9a36c8

File tree

1 file changed

+10
-19
lines changed

1 file changed

+10
-19
lines changed

articles/automation/automation-security-overview.md

Lines changed: 10 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -106,29 +106,20 @@ To learn more about the Azure Resource Manager and Classic deployment models, se
106106
107107
### Run As account
108108

109-
When you create a Run As account, it performs the following tasks:
110-
111-
* Creates an Azure AD application with a self-signed certificate, creates a service principal account for the application in Azure AD, and assigns the [Contributor](../role-based-access-control/built-in-roles.md#contributor) role for the account in your current subscription. You can change the certificate setting to [Reader](../role-based-access-control/built-in-roles.md#reader) or any other role. For more information, see [Role-based access control in Azure Automation](automation-role-based-access-control.md).
112-
113-
* Creates an Automation certificate asset named `AzureRunAsCertificate` in the specified Automation account. The certificate asset holds the certificate private key that the Azure AD application uses.
114-
115-
* Creates an Automation connection asset named `AzureRunAsConnection` in the specified Automation account. The connection asset holds the application ID, tenant ID, subscription ID, and certificate thumbprint.
109+
Run As Account consists of the following components:
110+
- An Azure AD application with a self-signed certificate, and a service principal account for the application in Azure AD, which is assigned the [Contributor](../role-based-access-control/built-in-roles.md#contributor) role for the account in your current subscription. You can change the certificate setting to [Reader](../role-based-access-control/built-in-roles.md#reader) or any other role. For more information, see [Role-based access control in Azure Automation](automation-role-based-access-control.md).
111+
- An Automation certificate asset named `AzureRunAsCertificate` in the specified Automation account. The certificate asset holds the certificate private key that the Azure AD application uses.
112+
- An Automation connection asset named `AzureRunAsConnection` in the specified Automation account. The connection asset holds the application ID, tenant ID, subscription ID, and certificate thumbprint.
116113

117114
### Azure Classic Run As account
118115

119-
> [!IMPORTANT]
120-
> Azure Automation Run As Account will retire on September 30, 2023 and will be replaced with Managed Identities. Before that date, you'll need to start migrating your runbooks to use [managed identities](automation-security-overview.md#managed-identities). For more information, see [migrating from an existing Run As accounts to managed identity](https://learn.microsoft.com/azure/automation/migrate-run-as-accounts-managed-identity?tabs=run-as-account#sample-scripts) to start migrating the runbooks from Run As account to managed identities before 30 September 2023.
121-
122-
When you create an Azure Classic Run As account, it performs the following tasks:
123-
124-
> [!NOTE]
125-
> You must be a co-administrator on the subscription to create or renew this type of Run As account.
126-
127-
* Creates a management certificate in the subscription.
128-
129-
* Creates an Automation certificate asset named `AzureClassicRunAsCertificate` in the specified Automation account. The certificate asset holds the certificate private key used by the management certificate.
116+
Azure Classic Run As Account consists of the following components:
117+
- A management certificate in the subscription.
118+
- An Automation certificate asset named `AzureClassicRunAsCertificate` in the specified Automation account. The certificate asset holds the certificate private key used by the management certificate.
119+
- An Automation connection asset named `AzureClassicRunAsConnection` in the specified Automation account. The connection asset holds the subscription name, subscription ID, and certificate asset name.
130120

131-
* Creates an Automation connection asset named `AzureClassicRunAsConnection` in the specified Automation account. The connection asset holds the subscription name, subscription ID, and certificate asset name.
121+
> [NOTE]
122+
> You must be a co-administrator on the subscription to renew this type of Run As account.
132123
133124
## Service principal for Run As account
134125

0 commit comments

Comments
 (0)