You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/automation/automation-faq.md
+13-12Lines changed: 13 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,43 +14,44 @@ ms.date: 02/25/2020
14
14
15
15
This Microsoft FAQ is a list of commonly asked questions about Azure Automation. If you have any additional questions about its capabilities, go to the discussion forum and post your questions. When a question is frequently asked, we add it to this article so that it can be found quickly and easily.
16
16
17
+
>[!NOTE]
18
+
>This article has been updated to use the new Azure PowerShell Az module. You can still use the AzureRM module, which will continue to receive bug fixes until at least December 2020. To learn more about the new Az module and AzureRM compatibility, see [Introducing the new Azure PowerShell Az module](https://docs.microsoft.com/powershell/azure/new-azureps-module-az?view=azps-3.5.0). For Az module installation instructions on your Hybrid Runbook Worker, see [Install the Azure PowerShell Module](https://docs.microsoft.com/powershell/azure/install-az-ps?view=azps-3.5.0). For your Automation account, you can update your modules to the latest version using [How to update Azure PowerShell modules in Azure Automation](automation-update-azure-modules.md).
19
+
17
20
## Update Management solution
18
21
19
22
### Can I prevent unexpected OS-level upgrades?
20
23
21
-
On some Linux variants, such as Red Hat Enterprise Linux, OS-level upgrades might occur through packages. This might lead to Update Management runs where the OS version number changes. Because Update Management uses the same methods to update packages that an administrator would use locally on the Linux machine, this behavior is intentional.
24
+
On some Linux variants, such as Red Hat Enterprise Linux, OS-level upgrades might occur through packages. This might lead to Update Management runs in which the OS version number changes. Because Update Management uses the same methods to update packages that an administrator uses locally on a Linux machine, this behavior is intentional.
22
25
23
26
To avoid updating the OS version through Update Management deployments, use the **Exclusion** feature.
24
27
25
-
In Red Hat Enterprise Linux, the package name to exclude is redhat-release-server.x86_64.
28
+
In Red Hat Enterprise Linux, the package name to exclude is `redhat-release-server.x86_64`.
26
29
27
30
### Why aren't critical/security updates applied?
28
31
29
-
When you deploy updates to a Linux machine, you can select update classifications. This option filters the updates that are applied to the machine that meet the specified criteria. This filter is applied locally on the machine when the update is deployed.
32
+
When you deploy updates to a Linux machine, you can select update classifications. This option filters the updates that meet the specified criteria. This filter is applied locally on the machine when the update is deployed.
30
33
31
-
Because Update Management performs update enrichment in the cloud, some updates can be flagged in Update Management as having a security impact, even though the local machine doesn't have that information. As a result, if you apply critical updates to a Linux machine, there might be updates that aren't marked as having a security impact on that machine and therefore the updates aren't applied. However, Update Management might still report that machine as non-compliant because it has additional information about the relevant update.
34
+
Because Update Management performs update enrichment in the cloud, you can flag some updates in Update Management as having a security impact, even though the local machine doesn't have that information. If you apply critical updates to a Linux machine, there might be updates that aren't marked as having a security impact on that machine and therefore aren't applied. However, Update Management might still report that machine as noncompliant because it has additional information about the relevant update.
32
35
33
-
Deploying updates by update classification doesn't work on RTM versions of CentOS. To properly deploy updates for CentOS, select all classifications to make sure updates are applied. For SUSE, selecting *only***Other updates** as the classification can cause some security updates to also be installed if security updates related to zypper (package manager) or its dependencies are required first. This behavior is a limitation of zypper. In some cases, you might be required to rerun the update deployment. To verify, check the update log.
36
+
Deploying updates by update classification doesn't work on RTM versions of CentOS. To properly deploy updates for CentOS, select all classifications to make sure updates are applied. For SUSE, selecting ONLY**Other updates** as the classification can cause some additional security updates to be installed if security updates related to zypper (package manager) or its dependencies are required first. This behavior is a limitation of zypper. In some cases, you might be required to rerun the update deployment and then verify the deployment through the update log.
34
37
35
38
### Can I deploy updates across Azure tenants?
36
39
37
-
If you have machines in another Azure tenant reporting to Update Management that you need to patch, you'll have to use the following workaround to get them scheduled. You can use the [New-AzureRmAutomationSchedule](/powershell/module/azurerm.automation/new-azurermautomationschedule) cmdlet with the `-ForUpdate` switch to create a schedule, and use the [New-AzureRmAutomationSoftwareUpdateConfiguration](/powershell/module/azurerm.automation/new-azurermautomationsoftwareupdateconfiguration
38
-
) cmdlet and pass the machines in the other tenant to the `-NonAzureComputer` parameter. The following example shows how to do this:
40
+
If you have machines that need patching in another Azure tenant reporting to Update Management, you must use a following workaround to get them scheduled. You can use the [New-AzAutomationSchedule](https://docs.microsoft.com/powershell/module/Az.Automation/New-AzAutomationSchedule?view=azps-3.7.0) cmdlet with the `ForUpdateConfiguration` parameter specified to create a schedule. You can use the [New-AzAutomationSoftwareUpdateConfiguration](https://docs.microsoft.com/powershell/module/Az.Automation/New-AzAutomationSoftwareUpdateConfiguration?view=azps-3.7.0) cmdlet and pass the machines in the other tenant to the `NonAzureComputer` parameter. The following example shows how to do this.
For general feedback about the Update Management solution, please visit the [feedback forum](https://feedback.azure.com/forums/905242-update-management).
Copy file name to clipboardExpand all lines: articles/automation/automation-first-runbook-graphical.md
+8-6Lines changed: 8 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -94,7 +94,7 @@ The runbook that you have created is still in Draft mode. It needs to be publish
94
94
1. Click **All Logs** to open the Streams pane for the runbook job. You should only see `Hello World` in the output stream.
95
95
96
96
Note that the Streams pane can show other streams for a runbook job, such as Verbose and Error streams, if the runbook writes to them.
97
-
1. Close the Streams pane and the Job pane to return to the **MyFirstRunbook-Graphical** page.
97
+
1. Close the Streams pane and the Job pane to return to the MyFirstRunbook-Graphical page.
98
98
1. To view all the jobs for the runbook, select **Jobs** under **Resources**. The Jobs page lists all the jobs created by your runbook. You should see only one job listed, since you have only run the job once.
99
99
1. Click the job name to open the same Job pane that you viewed when you started the runbook. Use this pane to view the details of any job created for the runbook.
100
100
@@ -120,7 +120,7 @@ Now that you have a variable to hold the subscription ID, you can configure the
120
120
>[!NOTE]
121
121
>For PowerShell runbooks, `Add-AzAccount` and `Add-AzureRMAccount` are aliases for `Connect-AzAccount`. Note that these aliases are not available for your graphical runbooks. A graphical runbook can only use `Connect-AzAccount`itself.
122
122
123
-
1. Navigate to your runbook and select **Edit** on the **MyFirstRunbook-Graphical** page.
123
+
1. Navigate to your runbook and select **Edit** on the MyFirstRunbook-Graphical page.
124
124
1. You don't need the `Write Hello World to output` entry any more. Just click the ellipsis and select **Delete**.
125
125
1. In the Library control, expand **ASSETS**, then **Connections**. Add `AzureRunAsConnection` to the canvas by selecting **Add to canvas**.
126
126
1. Rename `AzureRunAsConnection` to `Get Run As Connection`.
@@ -135,7 +135,7 @@ Now that you have a variable to hold the subscription ID, you can configure the
135
135
136
136
***Data source** -- select **Activity output**.
137
137
* Data source list -- select **Get Automation Connection**.
138
-
***Field path** -- type `ApplicationId`. You are specifying the name of the property for the field path because the activity outputs an object with multiple properties.
138
+
***Field path** -- type `ApplicationId`. You're specifying the name of the property for the field path because the activity outputs an object with multiple properties.
139
139
140
140
1. Click **CERTIFICATETHUMBPRINT**, and on the Parameter Value page, make the following settings and then click **OK**.
141
141
@@ -179,7 +179,7 @@ Now you must add a `Start-AzVM` activity to start a virtual machine. You can pic
179
179
180
180
Your runbook currently starts the VM in the resource group that you specified for the `Start-AzVM` cmdlet. The runbook will be more useful if you specify both name and resource group when the runbook is started. Let's add input parameters to the runbook to provide that functionality.
181
181
182
-
1. Open the graphical editor by clicking **Edit** on the **MyFirstRunbook-Graphical** pane.
182
+
1. Open the graphical editor by clicking **Edit** on the MyFirstRunbook-Graphical page.
183
183
1. Select **Input and output** and then **Add input** to open the Runbook Input Parameter pane.
184
184
1. Make the following settings in the provided fields and then click **OK**.
185
185
***Name** -- specify `VMName`.
@@ -237,7 +237,7 @@ You can now modify the runbook so that it only attempts to start the VM if it is
237
237
1. For the first `Write-Output` control, click **Parameters** and change the **Label** value to **Notify VM Started**.
238
238
1. For **InputObject**, change **Data source** to **PowerShell expression**, and type in the expression `$VMName successfully started.`.
239
239
1. On the second `Write-Output` control, click **Parameters** and change the **Label** value to **Notify VM Start Failed**.
240
-
1. For **InputObject**, change **Data source** to **PowerShell expression**, and type in the expression `$VMName could not start.`.
240
+
1. For **InputObject**, change **Data source** to **PowerShell expression**, and type in the expression `$VMName could not start`.
241
241
1. Create links from `Start-AzVM` to `Notify VM Started` and `Notify VM Start Failed`.
242
242
1. Select the link to `Notify VM Started` and change **Apply condition** to true.
243
243
1. For the **Condition expression**, type `$ActivityOutput['Start-AzVM'].IsSuccessStatusCode -eq $true`. This `Write-Output` control now only runs if the VM starts successfully.
@@ -252,4 +252,6 @@ You can now modify the runbook so that it only attempts to start the VM if it is
252
252
253
253
* To learn more about graphical authoring, see [Graphical authoring in Azure Automation](automation-graphical-authoring-intro.md).
254
254
* To get started with PowerShell runbooks, see [My first PowerShell runbook](automation-first-runbook-textual-powershell.md).
255
-
* To get started with PowerShell Workflow runbooks, see [My first PowerShell workflow runbook](automation-first-runbook-textual.md).
255
+
* To get started with PowerShell Workflow runbooks, see [My first PowerShell workflow runbook](automation-first-runbook-textual.md).
256
+
* For a PowerShell cmdlet reference, see [Az.Automation](https://docs.microsoft.com/powershell/module/az.automation/?view=azps-3.7.0#automation
Copy file name to clipboardExpand all lines: articles/automation/automation-first-runbook-textual-powershell.md
+9-7Lines changed: 9 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -71,7 +71,7 @@ Before you publish the runbook to make it available in production, you should te
71
71
2. Click **Start** to start the test. This should be the only enabled option.
72
72
3. Note that a [runbook job](automation-runbook-execution.md) is created and its status is displayed in the pane.
73
73
74
-
The job status starts as `Queued`, indicating that the job is waiting for a runbook worker in the cloud to become available. The status changes to `Starting` when a worker claims the job. Finally, the status becomes `Running` when the runbook actually starts to run.
74
+
The job status starts as Queued, indicating that the job is waiting for a runbook worker in the cloud to become available. The status changes to Starting when a worker claims the job. Finally, the status becomes Running when the runbook actually starts to run.
75
75
76
76
4. When the runbook job completes, the Test pane displays its output. In this case, you see `Hello World`.
77
77
@@ -85,15 +85,15 @@ The runbook that you have created is still in Draft mode. It needs to be publish
85
85
86
86
1. Click **Publish** to publish the runbook and then **Yes** when prompted.
87
87
1. Scroll left to view the runbook on the Runbooks page, and note that the **Authoring Status** value is set to **Published**.
88
-
1. Scroll back to the right to view the pane for **MyFirstRunbook-PowerShell**.
88
+
1. Scroll back to the right to view the page for **MyFirstRunbook-PowerShell**.
89
89
90
90
The options across the top allow you to start the runbook now, schedule a future start time, or create a [webhook](automation-webhooks.md) so that the runbook can be started through an HTTP call.
91
91
1. Select **Start** and then **Yes** when prompted to start the runbook.
92
92
1. A Job pane is opened for the runbook job that has been created. Although you can close this pane, leave it open right now so that you can watch the job's progress. The job status is shown in **Job Summary**, and possible statuses are as described for testing the runbook.
1. Close the Streams pane and the Job pane to return to the **MyFirstRunbook-PowerShell** page.
107
+
1. Close the Streams pane and the Job pane to return to the MyFirstRunbook-PowerShell page.
108
108
1. Under **Details**, click **Jobs** to open the Jobs page for this runbook. This page lists all the jobs created by your runbook. You should only see one job listed, since you have only run the job once.
1. Open the textual editor by clicking **Edit** on the **MyFirstRunbook-PowerShell** page.
148
+
1. Open the textual editor by clicking **Edit** on the MyFirstRunbook-PowerShell page.
149
149
1. You don't need the `Write-Output` line any longer. Just go ahead and delete it.
150
150
1. Type or copy and paste the following code, which handles the authentication with your Automation Run As account.
151
151
@@ -176,7 +176,7 @@ As shown in the example below, the Run As connection is made with the [Connect-A
176
176
177
177
## Step 6 - Add code to start a virtual machine
178
178
179
-
Now that your runbook is authenticating to your Azure subscription, you can manage resources. Let's add a command to start a virtual machine. You can pick any virtual machine in your Azure subscription, and just hardcode that name in the runbook for now.
179
+
Now that your runbook is authenticating to your Azure subscription, you can manage resources. Let's add a command to start a virtual machine. You can pick any virtual machine in your Azure subscription, and just hard-code that name in the runbook for now.
180
180
181
181
1. To your runbook script, add the [Start-AzVM](https://docs.microsoft.com/powershell/module/Az.Compute/Start-AzVM?view=azps-3.5.0) cmdlet to start the virtual machine. As shown below, the cmdlet starts a virtual machine with the name `VMName` and with a resource group named `ResourceGroupName`.
182
182
@@ -206,7 +206,7 @@ Now that your runbook is authenticating to your Azure subscription, you can mana
206
206
207
207
## Step 7 - Add an input parameter
208
208
209
-
Your runbook currently starts the virtual machine that you hardcoded in the runbook. The runbook will be more useful if you specify the virtual machine when the runbook is started. Let's add input parameters to the runbook to provide that functionality.
209
+
Your runbook currently starts the virtual machine that you hard-coded in the runbook. The runbook is more useful if you specify the virtual machine when the runbook is started. Let's add input parameters to the runbook to provide that functionality.
210
210
211
211
1. In the textual editor, modify the `Start-AzVM` cmdlet to use variables for the parameters `VMName` and `ResourceGroupName`.
212
212
@@ -246,6 +246,8 @@ Your runbook currently starts the virtual machine that you hardcoded in the runb
246
246
## Next steps
247
247
248
248
* For more information on PowerShell, including language reference and learning modules, see the [PowerShell Docs](/powershell/scripting/overview).
249
+
* For a PowerShell cmdlet reference, see [Az.Automation](https://docs.microsoft.com/powershell/module/az.automation/?view=azps-3.7.0#automation
250
+
).
249
251
* To get started with graphical runbooks, see [My first graphical runbook](automation-first-runbook-graphical.md).
250
252
* To get started with PowerShell Workflow runbooks, see [My first PowerShell Workflow runbook](automation-first-runbook-textual.md).
251
253
* To know more about runbook types and their advantages and limitations, see [Azure Automation runbook types](automation-runbook-types.md).
0 commit comments