Hi, sorry haven't tried/needed that yet.

Thanks!

Not sure what you mean by "runbook is getting stuck". Granting the permissions is done outside the runbook, for example in PS console where you are connected to Azure as Global Admin.

Anyway to get all service principals, so you can easily search them you can use command: Get-AzureADServicePrincipal -All:$true | Out-GridView

Ondrej Sebela

Thanks, I confirmed the service principal name for the Azure Automation account using that command.

The runbook does not really get stuck.
What happens is that I run a test it edit mode.
It completes, but I can tell the whole script has not run
(as debug output statements are missing)

Connect-AzAccount -Identity
-> this works

$MSI = (Get-AzAzureADServicePrincipal -Filter "displayName eq '$automationAccountDisplayName'")
-> nothing is executed on or after this line

Bruce

So you are talking about granting the permissions section. But these commands should be run in your interactive PowerShell console, not under the managed identity in Azure Automation. I've edited the post so hopefully, it will be more clear.