How to authenticate PowerShell cmdlets in Runbooks with managed identities?
Hi there.
This is regarding Azure Automation Runbooks.
I'm attempting to replace AzureRunAs connections with user/system managed identities.
One problem I ran into with this is that I have no idea how to get the PowerShell cmdlet's used
in those Runbooks to authenticate.
For example for a Runbook that relies on the ExchangeOnline cmdlet's I was able to use the
AzureRunAs connections credentials via Get-AutomationConnection –Name "AzureRunAsConnection".
Since this AzureRunAs connection is also an App Registration in Azure, I could assign API
permissions to them, like for ExchangeOnline. The AzureRunAs connection also comes with
a certificate that I could make use of for authentication purposes.
On way I thought I could achieve this is for example with:
Connect-ExchangeOnline -ManagedIdentity -Organization