Permissions required for import_py3package_from_pypi to install python runbook packages and their dependencies

Grant Fullston 25

Hi all,

I have been trying to install python runbook packages for a script that I am running. I am aware that I can manually upload each whl file for the packages, however, this does not manage the package dependencies. I then found the provided import_py3package_from_pypi script (https://github.com/azureautomation/runbooks/blob/master/Utility/Python/import_py3package_from_pypi.py), I have uploaded this as a runbook in my azure automation account, and when I start it, I enter the required string for args.

I am met with this error:
__ERROR: Could not install packages due to an EnvironmentError: [WinError 5] Access is denied: 'c:\userenv\scripts\pip.exe' Consider using the --user option or check the permissions. Traceback (most recent call last): File "/usr/src/tmp/

Umar 160 Reputation points

2024-04-30T05:40:56.6533333+00:00
To address the permissions issue and successfully run the import_py3package_from_pypi.py script in your Azure Automation account, ensure that the Azure Automation resource has the necessary permissions to execute pip commands and install packages. The Contributor role typically grants permissions for managing Azure resources but may not include permissions for executing commands on the host system.

You can try granting the Azure Automation resource the Virtual Machine Contributor role or custom permissions to execute commands on the host system. Additionally, ensure that the Azure Automation Run As account has the appropriate permissions, as it is used to authenticate and execute runbooks in Azure Automation.

Regarding compatibility with Python versions and package dependencies:

The import_py3package_from_pypi.py script should work with Python 3.8 or 3.10 as long as the required Python interpreter is available on the host system.

You are correct that specifying the package version ensures compatibility with the runbook's Python interpreter version.

You can install multiple versions of the same package if needed, each compatible with different Python interpreter versions. This allows you to accommodate scenarios where one version is compatible with CPython 3.8 and another with CPython 3.10.

For packages like pandas where compatibility may vary between Python versions, installing different versions for each interpreter version is a valid approach.

Ensure that the Azure Automation environment is configured correctly to handle these dependencies and execute the script with the necessary permissions. If you continue to encounter issues, you may need to troubleshoot further or seek assistance from Azure support.
Grant Fullston 25 Reputation points

2024-05-07T06:52:03.48+00:00

Hi Umar,

Thank you for the answer, I have currently trying to give the Azure Automation account the Virtual Machine Contributor Role however this is not available to select in the Access Control tab of the Azure Automation account. i have even tried increasing the permissions of the azure account to owner and this has not changed the error.

Any ideas are much appreciated

Share via

Permissions required for import_py3package_from_pypi to install python runbook packages and their dependencies