You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#Customer intent: As an implementer, I want answers to various questions.
10
10
---
11
11
12
-
# Frequently asked questions when migrating from Run As account to Managed identities
12
+
# Frequently asked questions when migrating from Run As account to managed identities
13
13
14
14
This Microsoft FAQ is a list of commonly asked questions when you're migrating from Run As account to Managed Identity. If you have any other questions about the capabilities, go to the [discussion forum](https://aka.ms/retirement-announcement-automation-runbook-start-using-managed-identities) and post your questions. When a question is frequently asked, we add it to this article so that it benefits all.
15
15
@@ -33,12 +33,12 @@ You can [use this script](https://github.com/azureautomation/runbooks/blob/maste
33
33
## Will the runbooks that still use the Run As account be able to authenticate even after September 30, 2023?
34
34
Yes, the runbooks will be able to authenticate until the Run As account certificate expires.
35
35
36
-
## What is Managed Identity?
36
+
## What is managed identity?
37
37
Managed identities provide an automatically managed identity in Azure Active Directory for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Applications can use managed identities to obtain Azure AD tokens without managing credentials, secrets, certificates or keys.
38
38
39
39
For more information about managed identities in Azure AD, see [Managed identities for Azure resources](/azure/active-directory/managed-identities-azure-resources/overview).
40
40
41
-
## What can I do with a Managed identity in Automation accounts?
41
+
## What can I do with a managed identity in Automation accounts?
42
42
An Azure Automation managed identity from Azure Active Directory (Azure AD) allows your runbook to access other Azure AD-protected resources easily. This identity is managed by the Azure platform and doesn't require you to provision or rotate any secrets. Key benefits are:
43
43
- You can use managed identities to authenticate to any Azure service that supports Azure AD authentication.
44
44
- Managed identities eliminate the management overhead associated with managing Run As account in your runbook code. You can access resources via a managed identity of an Automation account from a runbook without worrying about creating the service principal, Run As Certificate, Run As Connection and so on.
@@ -49,13 +49,13 @@ Run As account creates an Azure AD app used to manage the resources within the s
49
49
50
50
Managed identities eliminate this overhead by providing a secure method for the users to authenticate and access resources that support Azure AD authentication without worrying about any certificate or credential management.
51
51
52
-
## Can Managed Identity be used for both cloud and hybrid jobs?
52
+
## Can managed identity be used for both cloud and hybrid jobs?
53
53
Azure Automation supports [System-assigned managed identities](/azure/automation/automation-security-overview#managed-identities) for both cloud and Hybrid jobs. Currently, Azure Automation [User-assigned managed identities](/azure/automation/automation-security-overview#managed-identities-preview) can only be used for cloud jobs only and cannot be used for jobs run on a Hybrid Worker.
54
54
55
55
## Can I use Run as account for new Automation account?
56
56
Yes, only in a scenario when Managed identities aren't supported for specific on-premises resources. We'll allow the creation of Run As account through [PowerShell script](/azure/automation/create-run-as-account#create-account-using-powershell).
57
57
58
-
## How can I migrate from existing Run As account to Managed identities?
58
+
## How can I migrate from existing Run As account to managed identities?
59
59
Follow the steps mentioned in [migrate Run As accounts to Managed identity](/azure/automationmigrate-run-as-accounts-managed-identity).
60
60
61
61
## How do I see the runbooks that are using Run As account and know what permissions are assigned to the Run As account?
Copy file name to clipboardExpand all lines: articles/automation/migrate-run-as-accounts-managed-identity.md
+3-2Lines changed: 3 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -168,17 +168,18 @@ To check if Run As account is used in Graphical Runbooks:
168
168
169
169
1. Examine the parameters used by the cmdlet.
170
170
171
-
:::image type="content" source="./media/migrate-run-as-account-managed-identity/activity-parameterconfiguration.png" alt-text="Screenshot to examine the parameters used by cmdlet":::
171
+
:::image type="content" source="./media/migrate-run-as-account-managed-identity/activity-parameter-configuration.png" alt-text="Screenshot to examine the parameters used by cmdlet":::
172
172
173
173
1. For use with the Run As account, it will use the *ServicePrinicipalCertificate* parameter set *ApplicationId* and *Certificate Thumbprint* will be from the RunAsAccountConnection.
174
174
175
175
:::image type="content" source="./media/migrate-run-as-account-managed-identity/parameter-sets-inline.png" alt-text="Screenshot to check the parameter sets." lightbox="./media/migrate-run-as-account-managed-identity/parameter-sets-expanded.png":::
176
176
177
177
178
178
### How to edit graphical Runbook to use managed identity
179
+
179
180
You must test the managed identity to verify if the Graphical runbook is working as expected by creating a copy of your production runbook to use the managed identity and updating your test graphical runbook code to authenticate by using the managed identity. You can add this functionality to a graphical runbook by adding `Connect-AzAccount` cmdlet.
180
181
181
-
Listed below is an example to guide on how a graphical runbook that uses Run As account use managed identities:
182
+
Listed below is an example to guide on how a graphical runbook that uses Run As account uses managed identities:
182
183
183
184
1. Sign in to the [Azure portal](https://portal.azure.com).
184
185
1. Open the Automation account and select **Process Automation**, **Runbooks**.
0 commit comments