Skip to content

Commit d40a5d5

Browse files
Merge pull request #109853 from BethWilke/branch4
Adding new file for managing O365
2 parents 21a57ee + 20968ab commit d40a5d5

File tree

9 files changed

+227
-72
lines changed

9 files changed

+227
-72
lines changed

articles/automation/TOC.yml

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,15 @@
1717
displayName: certificate renewal
1818
- name: Configure authentication with AWS
1919
href: automation-config-aws-account.md
20-
- name: Encryption of secure assets in Azure Automation
20+
- name: Use Azure AD in Azure Automation to authenticate to Azure
21+
href: automation-use-azure-ad.md
22+
- name: Manage Office 365 services using Azure Automation
23+
href: manage-office-365.md
24+
- name: Encrypt secure assets in Azure Automation
2125
href: automation-secure-asset-encryption.md
2226
- name: Manage role-based access control
2327
href: automation-role-based-access-control.md
2428
displayName: RBAC
25-
- name: Use Azure AD in Azure Automation to authenticate to Azure
26-
href: automation-use-azure-ad.md
2729
- name: Move your Automation Account to another Subscription
2830
href: how-to/move-account.md
2931
- name: Automate onboarding of Automation Services
@@ -327,9 +329,9 @@
327329
href: shared-resources/credentials.md
328330
- name: PowerShell modules
329331
items:
330-
- name: Modules
332+
- name: Manage modules in Azure Automation
331333
href: shared-resources/modules.md
332-
- name: Using Az modules in Azure Automation
334+
- name: Az module support in Azure Automation
333335
href: az-modules.md
334336
- name: Update Azure PowerShell modules
335337
href: automation-update-azure-modules.md

articles/automation/automation-secure-asset-encryption.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Encryption of secure assets in automation
3-
description: Azure automation protects secure assets using multiple levels of encryption. By default, the encryption is done using Microsoft-managed keys. Customers can configure their automation accounts to use customer-managed keys for encryption. This article describes the details of both modes of encryption and how you can switch between the two.
2+
title: Encrypt secure assets in Azure Automation
3+
description: Azure Automation protects secure assets using multiple levels of encryption. By default, the encryption is done using Microsoft-managed keys. Customers can configure their automation accounts to use customer-managed keys for encryption. This article describes the details of both modes of encryption and how you can switch between the two.
44
services: automation
55
ms.service: automation
66
ms.subservice: process-automation
@@ -11,12 +11,12 @@ ms.topic: conceptual
1111
manager: kmadnani
1212
---
1313

14-
# Secure assets in Azure Automation
14+
# Encrypt secure assets in Azure Automation
1515

1616
Secure assets in Azure Automation include credentials, certificates, connections, and encrypted variables. These assets are protected in Azure Automation using multiple levels of encryption.
1717
Based on the top-level key used for the encryption, there are two models for encryption:
18-
- Using Microsoft-managed keys
19-
- Using customer-managed keys
18+
- Using Microsoft-managed keys
19+
- Using customer-managed keys
2020

2121
## Microsoft-managed Keys
2222

articles/automation/automation-use-azure-ad.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ You can use the Azure portal to create the credential asset. Do this operation f
9090

9191
### Create the credential asset with Windows PowerShell
9292

93-
To prepare a new credential asset in Windows PowerShell, your script first creates a `PSCredential` object using the assigned username and password. The script then uses this object to create the asset through a call to the [New-AzureAutomationCredential](https://docs.microsoft.com/powershell/module/servicemanagement/azure/new-azureautomationcredential?view=azuresmps-4.0.0) cmdlet. Alternatively, the script can call the [Get-Credential](https://docs.microsoft.com/powershell/module/microsoft.powershell.security/get-credential?view=powershell-7) cmdlet to prompt the user to type in a name and password. See [Credential assets in Azure Automation](shared-resources/credentials.md).
93+
To prepare a new credential asset in Windows PowerShell, your script first creates a `PSCredential` object using the assigned user name and password. The script then uses this object to create the asset through a call to the [New-AzureAutomationCredential](https://docs.microsoft.com/powershell/module/servicemanagement/azure/new-azureautomationcredential?view=azuresmps-4.0.0) cmdlet. Alternatively, the script can call the [Get-Credential](https://docs.microsoft.com/powershell/module/microsoft.powershell.security/get-credential?view=powershell-7) cmdlet to prompt the user to type in a name and password. See [Credential assets in Azure Automation](shared-resources/credentials.md).
9494

9595
## Managing Azure resources from an Azure Automation runbook
9696

articles/automation/az-modules.md

Lines changed: 22 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Using Az modules in Azure Automation
3-
description: This article provides information using Az modules in Azure Automation
2+
title: Az module support in Azure Automation
3+
description: This article provides information about using Az modules in Azure Automation.
44
services: automation
55
ms.subservice: shared-capabilities
66
ms.date: 02/08/2019
@@ -9,58 +9,60 @@ ms.topic: conceptual
99

1010
# Az module support in Azure Automation
1111

12-
Azure automation supports the ability to use the [Azure Powershell Az module](/powershell/azure/new-azureps-module-az?view=azps-1.1.0) in your runbooks. The Az module is not imported automatically in any new or existing Automation Accounts. This article discusses how to use Az modules with Azure Automation.
12+
Azure Automation supports the use of [Azure PowerShell Az module](/powershell/azure/new-azureps-module-az?view=azps-1.1.0) in your runbooks. The Az module is not imported automatically in any new or existing Automation accounts.
1313

1414
## Considerations
1515

16-
There are many things to take into consideration when using the Az module in Azure Automation. Runbooks and modules can be used by higher-level solutions in your Automation Account. Editing runbooks or upgrading modules can potentially cause issues with your runbooks. You should test all runbooks and solutions carefully in a separate Automation Account before importing the new `Az` modules. Any modifications to modules can negatively affect the [Start/Stop](automation-solution-vm-management.md) solution. We don't recommend altering modules and runbooks in Automation Accounts that contain any solutions. This behavior isn't specific to the Az modules. This behavior should be taken into consideration when introducing any changes to your Automation Account.
16+
There are many things to take into consideration when using the Az module in Azure Automation. Runbooks and modules can be used by higher-level solutions in your Automation account. Editing runbooks or upgrading modules can potentially cause issues with your runbooks. You should test all runbooks and solutions carefully in a separate Automation account before importing the new `Az` modules. Any modifications to modules can negatively affect the [Start/Stop](automation-solution-vm-management.md) solution. We don't recommend altering modules and runbooks in Automation accounts that contain any solutions. This behavior isn't specific to the Az modules. This behavior should be taken into consideration when introducing any changes to your Automation account.
1717

18-
Importing an `Az` module in your Automation Account doesn't automatically import the module in the PowerShell session that the runbooks use. Modules are imported into the PowerShell session in the following situations:
18+
Importing an `Az` module in your Automation account doesn't automatically import the module in the PowerShell session that the runbooks use. Modules are imported into the PowerShell session in the following situations:
1919

2020
* When a cmdlet from a module is invoked from a runbook
2121
* When a runbook imports it explicitly with the `Import-Module` cmdlet
2222
* When another module depending on the module is imported into a PowerShell session
2323

2424
> [!IMPORTANT]
25-
> It is important to make sure that runbooks in an Automation Account either only import `Az` or `AzureRM` modules into the PowerShell sessions used by runbooks and not both. If `Az` is imported before `AzureRM` in a runbook, the runbook will complete, but an [error referencing the get_SerializationSettings method](troubleshoot/runbooks.md#get-serializationsettings) will show in the job streams and cmdlets may have not been properly executed. If you import `AzureRM` and then `Az` your runbook will still complete, but you will see an error in the job streams stating that both `Az` and `AzureRM` cannot be imported in the same session or used in the same runbook.
25+
> It is important to make sure that runbooks in an Automation account either only import `Az` or `AzureRM` modules into the PowerShell sessions used by runbooks and not both. If `Az` is imported before `AzureRM` in a runbook, the runbook completes, but an error referencing the [Get_SerializationSettings](troubleshoot/runbooks.md#get-serializationsettings) cmdlet shows up in the job streams and cmdlets might not be properly executed. If you import `AzureRM` and then `Az`, your runbook still completes, but you receive an error in the job streams stating that both `Az` and `AzureRM` can't be imported in the same session or used in the same runbook.
2626
2727
## Migrating to Az modules
2828

29-
It's recommended you test the migration to using Az modules instead of AzureRM modules in a test Automation Account. Once that Automation Account has been created, you can use the following steps to ensure your migration goes smoothly:
29+
It's recommended that you test the migration to Az modules in a test Automation account. Once that Automation account has been created, you can use the instructions in this section to work with the modules.
3030

31-
### Stop and unschedule all runbook that uses AzureRM modules
31+
### Stop and unschedule all runbooks that use AzureRM cmdlets
3232

33-
To ensure that you do not run any existing runbooks that use `AzureRM` cmdlets, you should stop and unschedule all runbooks that use `AzureRM` modules. You can see what schedules exist and which schedules must be removed by running the following example:
33+
To ensure that you do not run any existing runbooks that use `AzureRM` cmdlets, you should stop and unschedule all runbooks that use `AzureRM` modules. You can see what schedules exist and which schedules must be removed by running code similar to this example.
3434

3535
```powershell-interactive
3636
Get-AzureRmAutomationSchedule -AutomationAccountName "<AutomationAccountName>" -ResourceGroupName "<ResourceGroupName>" | Remove-AzureRmAutomationSchedule -WhatIf
3737
```
3838

39-
It's important to review each schedule separately to ensure you can reschedule it in the future for your runbooks if necessary.
39+
It's important to review each schedule separately to ensure that you can reschedule it in the future for your runbooks if necessary.
4040

4141
### Import the Az modules
4242

43-
Only import the Az modules that are required for your runbooks. Don't import the rollup `Az` module, as it includes all of the `Az.*` modules to be imported. This guidance is the same for all modules.
43+
Only import the Az modules that are required for your runbooks. Don't import the rollup `Az` module, as it includes all `Az.*` modules. This guidance is the same for all modules.
4444

45-
The [Az.Accounts](https://www.powershellgallery.com/packages/Az.Accounts/1.1.0) module is a dependency for the other `Az.*` modules. For this reason, this module needs to be imported into your Automation Account before you import any other modules.
45+
The [Az.Accounts](https://www.powershellgallery.com/packages/Az.Accounts/1.1.0) module is a dependency for the other `Az.*` modules. For this reason, this module needs to be imported into your Automation account before you import any other modules.
4646

47-
From your Automation Account, select **Modules** under **Shared Resources**. Click **Browse Gallery** to open the **Browse Gallery** page. In the search bar, enter the module name (such as `Az.Accounts`). On the PowerShell Module page, click **Import** to import the module into your Automation Account.
47+
From your Automation account, select **Modules** under **Shared Resources**. Click **Browse Gallery** to open the **Browse Gallery** page. In the search bar, enter the module name (such as `Az.Accounts`). On the PowerShell Module page, click **Import** to import the module into your Automation account.
4848

49-
![Import modules from Automation Account](media/az-modules/import-module.png)
49+
![Import modules from Automation account](media/az-modules/import-module.png)
5050

51-
This import process can also be done through the [PowerShell Gallery](https://www.powershellgallery.com) by searching for the module. Once you find the module, select it and under the **Azure Automation** tab, click **Deploy to Azure Automation**.
51+
This import process can also be done through the [PowerShell Gallery](https://www.powershellgallery.com) by searching for the module for import. Once you find the module, select it and under the **Azure Automation** tab, click **Deploy to Azure Automation**.
5252

5353
![Import modules directly from gallery](media/az-modules/import-gallery.png)
5454

55-
## Test your runbooks
55+
## Testing your runbooks
5656

57-
Once the `Az` modules are imported in your Automation Account, you can now start editing your runbooks to use the Az module instead. The majority of the cmdlets have the same name except for `AzureRM` has been changed to `Az`. For a list of modules that do not follow this process, see [list of exceptions](/powershell/azure/migrate-from-azurerm-to-az#update-cmdlets-modules-and-parameters).
57+
Once the `Az` modules are imported into your Automation account, you can start editing your runbooks to use the Az modules. The majority of the cmdlets have the same names except that `AzureRM` has been changed to `Az`. For a list of modules that do not follow this naming convention, see [list of exceptions](/powershell/azure/migrate-from-azurerm-to-az#update-cmdlets-modules-and-parameters).
5858

59-
One way to test your runbooks before modifying your runbook to use the new cmdlets is by using `Enable-AzureRMAlias -Scope Process` at the beginning of a runbook. By adding this to your runbook, your runbook can run without changes.
59+
One way to test the modification of a runbook to use the new cmdlets is by using `Enable-AzureRMAlias -Scope Process` at the beginning of the runbook. By adding this command to your runbook, the script can run without changes.
6060

61-
## After migration details
61+
## After-migration details
6262

63-
After the migration is complete, don’t start runbooks using `AzureRM` modules on the account any longer. It's also recommended don’t import or update `AzureRM` modules on this account. Starting from this moment, consider this account migrated to `Az`, and operate with `Az` modules only. When a new Automation Account is created the existing `AzureRM` modules will still be installed and the tutorial runbooks will still be authored with `AzureRM` cmdlets. These runbooks should not be run.
63+
After the migration is complete, don't try to start runbooks using `AzureRM` modules on the Automation account any longer. It's also recommended to not import or update `AzureRM` modules on the account. Consider the account migrated to `Az`, and operate with `Az` modules only.
64+
65+
When a new Automation account is created, the existing `AzureRM` modules are still installed. You can still update the tutorial runbooks with `AzureRM` cmdlets. You should not run these runbooks.
6466

6567
## Next steps
6668

0 commit comments

Comments
 (0)