Pre-requisite: Azure
System Managed Identity in Azure is a feature that allows Azure services to authenticate themselves to other Azure services without needing explicit credentials. It means you don’t need to store any credentials in the code to show the resources. One can grant permissions to the System Managed Identity by using Azure role-based access control (Azure RBAC). This process simplifies authentication and improves security by reducing the risk of credentials being exposed or compromised.
Here, in this article, we will be enabling the System Managed Identity for an Automation Automation Account and also we are going to add Azure role-based access control role assignment for a target scope to allow access to other resources.
Steps to Enable System-Managed Identity
Step 1: Log in to the Azure Portal.
Step 2: Access the Azure Automation Accounts from azure global search and Select the target Automation account resource.
Step 3: After accessing the target Azure Automation Account, search and select Identity from the menu section.
Step 4: Now select the System assigned.
Step 5: Now in the System assigned tab >> toggle the status to on >> Click on Save >> Click on Yes.
Now you are done with enabling the system assigned managed for an Azure Automation account. Follow the next step to add Azure RBAC role assignment for the system-managed identity to allow access to other resources.
Step 6: To add role assignments, click on Azure Role assignments and select the details as mentioned.
- Scope = <Target Scope>
- Subscription = <Target Subscription>
- Role = <role type>
- Click on Save.
Step 7: Once the role is assigned you can verify the assignments in the Azure role assignments section.