Update-AutomationRunAsAccountRoleAssignments
1.0.1
Use this script to restrict the permissions of your Azure Automation RunAs accounts. You can:
- Create a new custom role definition that excludes specified resources. If you use this script as-is, it will exclude Azure Key Vault; however,
you can exclude any resource type as required in your organization.
- Assign an existing custom role definition to your RunAs acc
- Create a new custom role definition that excludes specified resources. If you use this script as-is, it will exclude Azure Key Vault; however,
you can exclude any resource type as required in your organization.
- Assign an existing custom role definition to your RunAs acc
Use this script to restrict the permissions of your Azure Automation RunAs accounts. You can:
- Create a new custom role definition that excludes specified resources. If you use this script as-is, it will exclude Azure Key Vault; however,
you can exclude any resource type as required in your organization.
- Assign an existing custom role definition to your RunAs accounts.
- Add more subscriptions to the scope of your custom role definition.
- Change the role assignment of your RunAs account. For example, if your RunAs account has the original built-in "Contributor" role
assigned to it, you can reassign it to your custom role definition.
The script will update all automation accounts in all provided subscriptions.
Show more
- Create a new custom role definition that excludes specified resources. If you use this script as-is, it will exclude Azure Key Vault; however,
you can exclude any resource type as required in your organization.
- Assign an existing custom role definition to your RunAs accounts.
- Add more subscriptions to the scope of your custom role definition.
- Change the role assignment of your RunAs account. For example, if your RunAs account has the original built-in "Contributor" role
assigned to it, you can reassign it to your custom role definition.
The script will update all automation accounts in all provided subscriptions.
Installation Options
Author(s)
Automation Team
Package Details
Owners
Tags
Functions
GetOrCreateCustomRoleDefinition GetRunAsAccountAADApplicationId AssignCustomRoleToRunAsAccounts
Dependencies
This script has no dependencies.
FileList
- Update-AutomationRunAsAccountRoleAssignments.nuspec
- Update-AutomationRunAsAccountRoleAssignments.ps1
Version History
Version | Downloads | Last updated |
---|---|---|
1.0.1 (current version) | 760 | 7/7/2019 |