How to fix this issue

Kamble Jeet PUN FIIA2 0

Unable to acquire token for tenant 'organizations' with error 'ManagedIdentityCredential authentication failed: Internal Server Error!
Status: 500 (Internal Server Error)

Script:
Param(
 [string]$resourceGroup,
 [string]$method,
 [string]$UAMI 
)

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
CarlZhao-MSFT 36,976 Reputation points

2023-11-23T07:26:58.9233333+00:00

Please share your context.

Kamble Jeet PUN FIIA2 0

Got this error while trying to run the below script I see nothing wrong as I picked up this script from a Microsoft article https://learn.microsoft.com/en-us/azure/automation/learn/powershell-runbook-managed-identity

Param(
 [string]$resourceGroup,
 [string]$method,
 [string]$UAMI 
)

$automationAccount = "xAutomationAccount"

# Ensures you do not inherit an AzContext in your runbook
Disable-AzContextAutosave -Scope Process | Out-Null

# Connect using a Managed Service Identity
try {
        $AzureContext = (Connect-AzAccount -Identity).context
    }
catch{
        Write-Output "There is no system-assigned user identity. Aborting."; 
        exit
    }

# set and store context
$AzureContext = Set-AzContext -SubscriptionName $AzureContext.Subscription `
    -DefaultProfile $AzureContext

if ($method -eq "SA")
    {
        Write-Output "Using system-assigned managed identity"
    }
elseif ($method -eq "UA")
    {
        Write-Output "Using user-assigned managed identity"

        # Connects using the Managed Service Identity of the named user-assigned managed identity
        $identity = Get-AzUserAssignedIdentity -ResourceGroupName $resourceGroup `
            -Name $UAMI -DefaultProfile $AzureContext

        # validates assignment only, not perms
        if ((Get-AzAutomationAccount -ResourceGroupName $resourceGroup `
                -Name $automationAccount `
                -DefaultProfile $AzureContext).Identity.UserAssignedIdentities.Values.PrincipalId.Contains($identity.PrincipalId))
            {
                $AzureContext = (Connect-AzAccount -Identity -AccountId $identity.ClientId).context

                # set and store context
                $AzureContext = Set-AzContext -SubscriptionName $AzureContext.Subscription -DefaultProfile $AzureContext
            }
        else {
                Write-Output "Invalid or unassigned user-assigned managed identity"
                exit
            }
    }
else {
        Write-Output "Invalid method. Choose UA or SA."
        exit
     }

1 answer

dashanan13 930 Reputation points

2024-02-29T13:17:30.0433333+00:00

Hei @Kamble Jeet PUN FIIA2 , Thank you for contacting Microsoft Q&A I tried the the tutorial you mentioned and steps pan out correctly. Please give it another try on Azure and make sure that you do not get any errors from the steps before. Also make sure that prerequisites are met before you start. Mark this as answer if it helped Tutorial: https://learn.microsoft.com/en-us/azure/automation/learn/powershell-runbook-managed-identity
Please sign in to rate this answer.

0 comments No comments
Sign in to comment