An Azure service that is used to automate, configure, and install updates across hybrid environments.
This process needs to create a service principal on your tenant so your user account would have to be at least an "application administrator" on your tenant or a "global administrator" role would be able do this also.
https://learn.microsoft.com/en-us/azure/automation/automation-security-overview#permissions