Azure Automation
An Azure service that is used to automate, configure, and install updates across hybrid environments.
1,349 questions
Azure Automation Account for Powershell Runbook - Insufficient Privileges to Run Operation
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 34%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGT%3C/text%3E%3C/svg%3E)
Greg Thomas
121
Reputation points
I have an Azure Automation Account that is running some simple powershell code via a runbook.
I have granted rights to the subscription for this account.
When I call any of these commands I get an insufficient privileges error
Connect-AzAccount -Identity
Write-Host "Setting Subscription Context"
Set-AzContext -SubscriptionId $StoredSubscriptionId
I have granted subscription level permissions for Owner, Contributor and Reader to the subscription on the Automation Account (running as a managed identity).
What permissions am I missing for these commands to work?
Thank you - Greg.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 72%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENP%3C/text%3E%3C/svg%3E)
Naveena Patlolla 1,630 Reputation points Microsoft External Staff2025-03-26T00:32:12.1733333+00:00 Hi Greg Thomas
Please refer below document and follow the instructions
https://learn.microsoft.com/en-us/azure/automation/enable-managed-identity-for-automation#enable-using-the-azure-portal Enable Managed Identity for your Azure Automation Account:
System-assigned Managed Identity:
In the Azure portal, navigate to your Automation Account.
Go to "Identity" under "Account Settings."
Set "System assigned" to "On."
Click "Save."
Azure will create a managed identity associated with your Automation Account.
Next, Assign role to a system-assigned managed identity
let us know if you have any further queries. I’m happy to assist you further.
-
Greg Thomas 121 Reputation points
2025-03-26T12:19:23.5566667+00:00 Hello - this is exactly what I have done and I have granted the managed identity the permissions to these objects -but it doesn't seem to work.
I have granted subscription level permissions for Owner, Contributor and Reader to the subscription on the Automation Account (running as a managed identity).
To clarify - the Automation Account is setup to use a Managed Identify and I have granted what I think are the appropriate RBAC roles.
Thank you.
-
Naveena Patlolla 1,630 Reputation points Microsoft External Staff
2025-03-26T15:52:39.68+00:00 Hi Greg Thomas
Thanks for your response
Please double check that your automation account has permission like Contributor as shown below
And try to execute the code below, and if you encounter any issues, share a screenshot of the error.
# Connect to Azure with system-assigned managed identity $AzureContext = (Connect-AzAccount -Identity).context # set and store context $AzureContext = Set-AzContext -SubscriptionName $AzureContext.Subscription -DefaultProfile $AzureContext # Connect to Azure (if not already connected) Connect-AzAccount #Select your subscription Select-AzSubscription -Subscription "YourSubscriptionName" #To get all Resource groups Get-AzResourceGroupPlease "Upvote" if the comment is helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 63%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAG%3C/text%3E%3C/svg%3E)
Ashok Gandhi Kotnana 5,630 Reputation points Microsoft External Staff2025-03-27T07:23:58.2466667+00:00 Hi Greg Thomas,
Just want to check if the above answer worked for you or else please let us know if any help, we are always here to help whenever you need us.
let us know if you have any further queries. I’m happy to assist you further.
Please "Upvote" if the comment is helpful
-
Naveena Patlolla 1,630 Reputation points Microsoft External Staff
2025-03-28T17:45:39.2266667+00:00 Hi Greg Thomas,
Just want to check if the above answer worked for you or else please let us know if any help, we are always here to help whenever you need us.
let us know if you have any further queries. I’m happy to assist you further.
Please "Upvote" if the comment is helpful
-
Greg Thomas 121 Reputation points
2025-03-31T14:19:34.5266667+00:00 Hello,
No the issue has not bee resolved.
When the command is run within runbooks I get the following error.
Powershell Runbook Authorization_RequestDenied... Insufficient privileges to complete the operation"
The following permissions have been granted to this managed identity.
-
Naveena Patlolla 1,630 Reputation points Microsoft External Staff
2025-03-31T14:30:26.1566667+00:00
Sign in to comment
Sign in to answer