This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 86%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
Hello, there is one account that is assigned an Exchange Online license and which only serves to send reports from scripts that are located in Automation Accounts. The script uses an Automation Credential, which specifies the login and password.
Now I am seeing attempts to guess a password from a third-party IP address. I would like to prevent the user from logging in through the web interface or from non-Azure Automation addresses.
Thank you.
You can apply conditional access that Block or Allow access By location
Also, you can apply various conditions to allow or deny access.
Hope this helps!
Thank you, but this will not solve the issue. I know I can set up conditional access and restrict by location. I would like to find a better solution. However, I didn't expect an answer here.
@Mountain Pond the response above provided by @Carlos Solis Salazar is the most prudent course of action.
The only other option I can think of is using system-assigned managed identity with your automation account. You can then configure that account to connect to Exchange Online if need be. Since it's a managed account, no one (or thing) will be logging in because the identity is tied to that resource.