Update-AutomationRunAsAccountRoleAssignments

Use this script to restrict the permissions of your Azure Automation RunAs accounts. You can:
- Create a new custom role definition that excludes specified resources. If you use this script as-is, it will exclude Azure Key Vault; however,
 you can exclude any resource type as required in your organization.
- Assign an existing custom role definition to your RunAs accounts.
- Add more subscriptions to the scope of your custom role definition.
- Change the role assignment of your RunAs account. For example, if your RunAs account has the original built-in "Contributor" role
 assigned to it, you can reassign it to your custom role definition.
The script will update all automation accounts in all provided subscriptions.