question

AnnNaccarato-3804 avatar image
0 Votes"
AnnNaccarato-3804 asked SwathiDhanwada-MSFT commented

What is the Run As account?

Just inherited the azure, still learning Came across the run as account needing a certificate renewal. It's a self signed certificate, but what is it used for, and what kind of havoc am I going to get if I renew it or don't renew it.

azure-automation
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@AnnNaccarato-3804 Did you get chance to look into my previous comment ? Let me know if you have any questions.

0 Votes 0 ·

1 Answer

SwathiDhanwada-MSFT avatar image
0 Votes"
SwathiDhanwada-MSFT answered

@AnnNaccarato-3804 Welcome to Microsoft Q & A Community Forum. Run As accounts in Azure Automation provide authentication for managing resources on Azure. When RunAsAccount is created , the following steps are performed.

97932-image.png

As mentioned in above screenshot, a service principal is created and Azure service principal is a security identity used by user-created apps, services, and automation tools to access specific Azure resources. Think of it as a 'user identity' (login and password or certificate) with a specific role, and tightly controlled permissions to access your resources. It only needs to be able to do specific things, unlike a general user identity. It improves security if you only grant it the minimum permissions level needed to perform its management tasks.

Whenever you logon to perform tasks, you either need to have login credentials , it can be either login password or certificate. In short, the certificate is used for authentication purposes. If its not renewed, the automation jobs that you have created will be errored out.





image.png (42.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.