Skip to content

Commit 56d4e2f

Browse files
v-ccolinv-ccolin
authored
Merge pull request #171412 from dagiro/1861158
1861158 - Automation Freshness - quickstarts/create-account-portal.md
2 parents e65ec24 + c7389c2 commit 56d4e2f

16 files changed

+107
-41
lines changed

‎articles/automation/TOC.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,13 @@
1414
items:
1515
- name: Create Automation account - Azure portal
1616
href: quickstarts/create-account-portal.md
17+
- name: Enable managed identities - Azure portal
18+
href: quickstarts/enable-managed-identity.md
1719
- name: Enable Desired State Configuration for a machine
1820
href: quickstarts/dsc-configuration.md
1921
- name: Tutorials
2022
items:
21-
- name: Use managed identity with PowerShell runbook
23+
- name: Create PowerShell runbook using managed identity
2224
href: learn/powershell-runbook-managed-identity.md
2325
- name: Create a PowerShell Workflow runbook
2426
href: learn/automation-tutorial-runbook-textual.md

‎articles/automation/learn/powershell-runbook-managed-identity.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Use managed identities with a PowerShell runbook in Azure Automation
2+
title: Create PowerShell runbook using managed identity in Azure Automation
33
description: In this tutorial, you learn how to use managed identities with a PowerShell runbook in Azure Automation.
44
services: automation
55
ms.subservice: process-automation
@@ -8,7 +8,7 @@ ms.topic: tutorial
88
#Customer intent: As a developer, I want PowerShell runbooks to execute code using a manged identity.
99
---
1010

11-
# Tutorial: Use managed identities with a PowerShell runbook in Azure Automation
11+
# Tutorial: Create Automation PowerShell runbook using managed identity
1212

1313
This tutorial walks you through creating a [PowerShell runbook](../automation-runbook-types.md#powershell-runbooks) in Azure Automation that uses [managed identities](../automation-security-overview.md#managed-identities-preview), rather than the Run As account to interact with resources. PowerShell runbooks are based on Windows PowerShell. A managed identity from Azure Active Directory (Azure AD) allows your runbook to easily access other Azure AD-protected resources.
1414

‎articles/automation/quickstarts/create-account-portal.md

Lines changed: 29 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -1,69 +1,60 @@
11
---
2-
title: Azure Quickstart - Create an Azure Automation account
3-
description: This article helps you get started creating an Azure Automation account and running a runbook.
2+
title: Quickstart - Create an Azure Automation account using the portal
3+
description: This quickstart helps you get started creating an Azure Automation account using the portal
44
services: automation
5-
ms.date: 09/01/2021
5+
ms.date: 09/07/2021
66
ms.topic: quickstart
77
ms.subservice: process-automation
88
ms.custom: mvc
9+
# Customer intent: As an administrator, I want to create an Automation account so that I can further use the Automation services.
910
---
1011

11-
# Create an Azure Automation account
12+
# Quickstart: Create an Automation account using the Azure portal
1213

13-
You can create an Azure Automation account through Azure, using the Azure portal, a browser-based user interface allowing access to a number of resources. One Automation account can manage resources across all regions and subscriptions for a given tenant.
14+
You can create an Azure [Automation account](../automation-security-overview.md) using the Azure portal, a browser-based user interface allowing access to a number of resources. One Automation account can manage resources across all regions and subscriptions for a given tenant. This Quickstart guides you in creating an Automation account.
1415

15-
This quickstart guides you in creating an Automation account and running a runbook in the account. If you don't have an Azure subscription, create a [free Azure account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
16+
## Prerequisites
1617

17-
## Sign in to Azure
18-
19-
[Sign in to Azure](https://portal.azure.com).
18+
An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
2019

2120
## Create Automation account
2221

23-
1. Choose a name for your Azure account. Automation account names are unique per region and resource group. Names for Automation accounts that have been deleted might not be immediately available.
24-
25-
> [!NOTE]
26-
> You can't change the account name once it has been entered in the user interface.
27-
28-
2. Click **Create a resource** found in the upper left corner of Azure portal.
29-
30-
3. Select **IT & Management Tools**, and then select **Automation**.
31-
32-
4. Enter the account information, including the selected account name. For **Create Azure Run As account**, choose **Yes** so that the artifacts to simplify authentication to Azure are enabled automatically. When the information is complete, click **Create** to start the Automation account deployment.
33-
34-
![Enter information about your Automation account in the page](./media/create-account-portal/create-automation-account-portal-blade.png)
35-
36-
> [!NOTE]
37-
> For an updated list of locations that you can deploy an Automation account to, see [Products available by region](https://azure.microsoft.com/global-infrastructure/services/?products=automation&regions=all).
22+
1. Sign in to the [Azure portal](https://portal.azure.com).
3823

39-
5. When the deployment has completed, click **All Services**.
24+
1. From the top menu, select **+ Create a resource**.
4025

41-
6. Select **Automation Accounts** and then choose the Automation account you've created.
26+
1. Under Categories**, select **IT & Management Tools**, and then select **Automation**.
4227

43-
![Automation account overview](./media/create-account-portal/automation-account-overview.png)
28+
:::image type="content" source="./media/create-account-portal/automation-account-portal.png" alt-text="Locating Automation accounts in portal.":::
4429

45-
## Run a runbook
30+
1. From the **Add Automation Account** page, provide the following information:
4631

47-
Run one of the tutorial runbooks.
32+
| Property | Description |
33+
|---|---|
34+
|Name| Enter a name unique for it's location and resource group. Names for Automation accounts that have been deleted might not be immediately available. You can't change the account name once it has been entered in the user interface. |
35+
|Subscription| From the drop-down list, select the Azure subscription for the account.|
36+
|Resource group|From the drop-down list, select your existing resource group, or select **Create new**.|
37+
|Location| From the drop-down list, select a location for the account. For an updated list of locations that you can deploy an Automation account to, see [Products available by region](https://azure.microsoft.com/global-infrastructure/services/?products=automation&regions=all)|
38+
|Create Azure Run As account| Select **No**. An Azure Run As account in the Automation account is useful for authenticating with Azure; however, managed identities in Automation is now available. [Managed identities](../../active-directory/managed-identities-azure-resources/overview.md) provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. |
4839

49-
1. Click **Runbooks** under **Process Automation**. The list of runbooks is displayed. By default, several tutorial runbooks are enabled in the account.
40+
:::image type="content" source="./media/create-account-portal/add-automation-account-portal.png" alt-text="Required fields for adding the Automation account":::
5041

51-
![Automation account runbooks list](./media/create-account-portal/automation-runbooks-overview.png)
42+
1. Select **Create** to start the Automation account deployment. The creation completes in about a minute.
5243

53-
1. Select the **AzureAutomationTutorialScript** runbook. This action opens the runbook overview page.
44+
1. You will receive a notification when the deployment has completed. Select **Go to resource** in the notification to open the **Automation Account** page.
5445

55-
![Runbook overview](./media/create-account-portal/automation-tutorial-script-runbook-overview.png)
46+
1. Review your new Automation account.
5647

57-
1. Click **Start**, and on the Start Runbook page, click **OK** to start the runbook.
48+
:::image type="content" source="./media/create-account-portal/automation-account-overview.png" alt-text="Automation account overview page":::
5849

59-
![Runbook job page](./media/create-account-portal/automation-tutorial-script-job.png)
50+
## Clean up resources
6051

61-
1. After the job status becomes `Running`, click **Output** or **All Logs** to view the runbook job output. For this tutorial runbook, the output is a list of your Azure resources.
52+
If you're not going to continue to use the Automation account, select **Delete** from the **Overview** page, and then select **Yes** when prompted.
6253

6354
## Next steps
6455

65-
In this quickstart, you’ve deployed an Automation account, started a runbook job, and viewed the job results. To learn more about Azure Automation, continue to the quickstart for creating your first PowerShell runbook.
56+
In this Quickstart, you created an Automation account. To use managed identities with your Automation account, continue to the next Quickstart:
6657

6758
> [!div class="nextstepaction"]
68-
> [Quickstart - Create an Azure Automation PowerShell runbook](../learn/powershell-runbook-managed-identity.md)
59+
> [Quickstart - Enable managed identities](enable-managed-identity.md)
6960

‎articles/automation/quickstarts/enable-managed-identity.md

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
---
2+
title: Quickstart - Enable managed identities for your Automation account using the Azure portal
3+
description: This quickstart helps you enable managed identities for your Automation account using the Azure portal
4+
services: automation
5+
ms.date: 09/07/2021
6+
ms.topic: quickstart
7+
ms.subservice: process-automation
8+
# Customer intent: As an administrator, I want to enable managed identities for my Automation account so that I can securely access other Azure resources.
9+
---
10+
11+
# Quickstart: Enable managed identities for your Automation account using the Azure portal
12+
13+
This Quickstart shows you how to enable managed identities for an Azure Automation account. For more information on how managed identities work with Azure Automation, see [Managed identities](../automation-security-overview.md#managed-identities-preview).
14+
15+
## Prerequisites
16+
17+
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
18+
19+
- An Azure Automation account. For instructions, see [Create an Automation account](create-account-portal.md).
20+
21+
- A user-assigned managed identity. For instructions, see [Create a user-assigned managed identity](../../active-directory/managed-identities-azure-resources/how-to-manage-ua-identity-portal.md#create-a-user-assigned-managed-identity). The user-assigned managed identity and the target Azure resources that your runbook manages using that identity must be in the same Azure subscription.
22+
23+
## Enable system-assigned managed identity
24+
25+
1. Sign in to the [Azure portal](https://portal.azure.com) and navigate to your Automation account.
26+
27+
1. Under **Account Settings**, select **Identity (Preview)**.
28+
29+
:::image type="content" source="media/enable-managed-identity/managed-identity-portal.png" alt-text="Navigating to Identity in portal.":::
30+
31+
1. Set the system-assigned **Status** option to **On** and then press **Save**. When you're prompted to confirm, select **Yes**.
32+
33+
Your Automation account can now use the system-assigned identity, which is registered with Azure Active Directory (Azure AD) and is represented by an object ID.
34+
35+
:::image type="content" source="media/enable-managed-identity/system-assigned-object-id.png" alt-text="Managed identity object ID.":::
36+
37+
## Add user-assigned managed identity
38+
39+
This section continues from where the last section ended.
40+
41+
1. Select the **User assigned** tab, and then select **+ Add** or **Add user assigned managed identity** to open the **Add user assigned managed i...** page.
42+
43+
:::image type="content" source="media/enable-managed-identity/user-assigned-portal.png" alt-text="User-assigned tab in portal.":::
44+
45+
1. From the **Subscription** drop-down list, select the subscription for your user-assigned managed identity.
46+
47+
:::image type="content" source="media/enable-managed-identity/add-user-assigned.png" alt-text="Add user-assigned page in portal.":::
48+
49+
1. Under **User assigned managed identities**, select your existing user-assigned managed identity and then select **Add**. You'll then be returned to the **User assigned** tab.
50+
51+
:::image type="content" source="media/enable-managed-identity/added-user-identity-portal.png" alt-text="Added user-assigned in portal.":::
52+
53+
54+
## Clean up resources
55+
56+
If you no longer need the user-assigned managed identity attached to your Automation account, perform the following steps:
57+
58+
1. From the **User assigned** tab, select your user-assigned managed identity.
59+
60+
1. From the top menu, select **Remove**, and then select **Yes** when prompted for confirmation.
61+
62+
If you no longer need the system-assigned managed identity enabled for your Automation account, perform the following steps:
63+
64+
1. From the **System assigned** tab, under **Status**, select **Off**.
65+
66+
1. From the top menu, select **Save**, and then select **Yes** when prompted for confirmation.
67+
68+
## Next steps
69+
70+
In this Quickstart, you enabled managed identities for an Azure Automation account. To use your Automation account with managed identities to execute a runbook, see.
71+
72+
> [!div class="nextstepaction"]
73+
> [Tutorial: Create Automation PowerShell runbook using managed identity](../learn/powershell-runbook-managed-identity.md)

‎articles/automation/quickstarts/media/create-account-portal/add-automation-account-portal.png

14.4 KB
Loading

‎articles/automation/quickstarts/media/create-account-portal/automation-account-overview.png

-14.6 KB
Loading

‎articles/automation/quickstarts/media/create-account-portal/automation-account-portal.png

70.9 KB
Loading

‎articles/automation/quickstarts/media/create-account-portal/automation-runbooks-overview.png

-50.6 KB
Binary file not shown.

‎articles/automation/quickstarts/media/create-account-portal/automation-tutorial-script-job.png

-45.3 KB
Binary file not shown.

‎articles/automation/quickstarts/media/create-account-portal/automation-tutorial-script-runbook-overview.png

-46.9 KB
Binary file not shown.

0 commit comments

Comments
 (0)