Skip to content

Commit d0c85d1

Browse files
committed
feedback incorporated
1 parent b888f9e commit d0c85d1

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

articles/automation/migrate-run-as-accounts-managed-identity.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -158,9 +158,10 @@ foreach ($ResourceGroup in $ResourceGroups)
158158

159159
## Graphical runbooks
160160

161-
### How to check if Graphical Runbook is used in Run As Account
161+
### How to check if Run As account is used in Graphical Runbooks
162+
163+
To check if Run As account is used in Graphical Runbooks:
162164

163-
To check if graphical runbooks are used in Run As Account:
164165
1. Check each of the activities within the runbook to see if they use the Run As Account when calling any logon cmdlets/aliases. For example, `Add-AzRmAccount/Connect-AzRmAccount/Add-AzAccount/Connect-AzAccount`
165166

166167
:::image type="content" source="./media/migrate-run-as-account-managed-identity/check-graphical-runbook-use-run-as-inline.png" alt-text="Screenshot to check if graphical runbook uses Run As." lightbox="./media/migrate-run-as-account-managed-identity/check-graphical-runbook-use-run-as-expanded.png":::
@@ -169,9 +170,10 @@ To check if graphical runbooks are used in Run As Account:
169170

170171
:::image type="content" source="./media/migrate-run-as-account-managed-identity/activity-parameter configuration.png" alt-text="Screenshot to examine the parameters used by cmdlet":::
171172

172-
1. Use the *ServicePrinicipalCertificate* parameter set with Run As Account.
173+
1. For use with the Run As account, it will use the *ServicePrinicipalCertificate* parameter set *ApplicationId* and *Certificate Thumbprint* will be from the RunAsAccountConnection.
173174

174-
:::image type="content" source="./media/migrate-run-as-account-managed-identity/parameter-sets-inline.png" alt-text="Screenshot to check the parameter sets." lightbox="./media/migrate-run-as-account-managed-identity/parameter-sets-expanded.png":::
175+
:::image type="content" source="./media/migrate-run-as-account-managed-identity/parameter-sets-inline.png" alt-text="Screenshot to check the parameter sets." lightbox="./media/migrate-run-as-account-managed-identity/parameter-sets-expanded.png":::
176+
175177

176178
### How to edit graphical Runbook to use managed identity
177179
You must test the managed identity to verify if the Graphical runbook is working as expected by creating a copy of your production runbook to use the managed identity and updating your test graphical runbook code to authenticate by using the managed identity. You can add this functionality to a graphical runbook by adding `Connect-AzAccount` cmdlet.

0 commit comments

Comments
 (0)