Check-AutomationRunAsAccountRoleAssignments

If your Azure Automation accounts contain a RunAs account, it will by default have the built-in Contributor role assigned to it. You can use this script to check the role assignments of your Azure Automation RunAs accounts, and determine whether their role assignment is the default one, or whether it has been changed to a different role definitio... More info