How to create automation account in CSP subscription?

Question

Hi everyone,

I have moved EA subscription to CSP subscription. My role is owner this CSP subscription. But in process creating Automation Account, I got error messages:
Azure Run As account (service principal) creation error
An error occurred while creating the Azure Run As account (service principal) for account 'SGC-DF-Automation'.
Error details:
You don't have enough permissions to access service principal needed for the Run as account in the AAD tenant. See https://aka.ms/AARunAsPermissions for more details.

Please support me for resolve this process.
Thanks.
Nhan

Answer 1

Hi @Nhan Nguyen ,

it looks like you haven't the permission to create the (Azure Run As account (service principal) in the Azure AD.

The role owner on subscription level is not allowed to create or manage users in Azure AD.

The built-in roles of Azure AD you will find here: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten