Use this script to restrict the permissions of your Azure Automation RunAs accounts. You can: - Create a new custom role definition that excludes specified resources. If you use this script as-is, it will exclude Azure Key Vault; however, you can exclude any resource type as required in your organization. - Assign an existing custom role definiti... More info

If your Azure Automation accounts contain a RunAs account, it will by default have the built-in Contributor role assigned to it. You can use this script to check the role assignments of your Azure Automation RunAs accounts, and determine whether their role assignment is the default one, or whether it has been changed to a different role definitio... More info

This script will add the Reader role to an Automation RunAs Account for the specified Key Vault. If your RunAs account is configured with a custom role assignment, it may not have access to any of your Key Vault instances. This script will add a "Reader" role assignment to your RunAs account for the specified Key Vault. This will allow runbooks ... More info