Managed identity on automation account not working as expected

Question

I'm trying to use an Automation account to put some AVD hosts in azure local in drain so I can shut them down, I've configured an hybrid worker that is working with other runbooks but when I try to connect to azure using the managed identity of the hybrid worker I get the following error, if I check the ID in the warning in Entra it says it belongs to an Enterprise application with the name of the hybrid worker VM, how can I ensure it uses the correct managed identity?

Answer 1

Hi @David Pereira,

Welcome to Microsoft Q&A Forum, thank you for posting your query here!

In my test environment, I created a VM and set up an Automation Account. I then added the VM as a Hybrid Worker Node. After successfully adding the VM to the Automation Account as a Hybrid Worker, I assigned Contributor permissions to the Automation Account's managed identity.

How to identity: -

Now, go to your VDI and check whether the identity is enabled. If it is enabled, navigate to your Enterprise Applications, copy the Object ID of the managed system identity, and verify whether the service principal and managed identity are the same.in this way you can identity

The missing part here is the required permission. You need to grant Contributor access to the service principal for the managed identity of the VDI.

VM Identity

Enterprise Application verify here

Looks like it's a permission issue, please ensure your managed identity have the necessary permissions to the automation account and the worker node.

Once you have enabled provide this managed identity to the VDI copy paste the identity in IAM and provide that identity with contributor access find the below screenshot, please provide it to the appropriate managed identity

let us know if you have any further queries. I’m happy to assist you further.  

Please provide your valuable comments

Please do not forget to "Accept the answer” wherever the information provided helps you, this can be beneficial to other community members.