Azure Automation
An Azure service that is used to automate, configure, and install updates across hybrid environments.
1,174 questions
Failed to connect to MSI.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 7.000000000000001%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAP%3C/text%3E%3C/svg%3E)
Apurva Pathak
360
Reputation points
Hi folks,
I am using Azure Automation account PowerShell runbook to login to Azure CLI using identity, but it is failing with below errors. I even tried authenticating with a UMI but same error.
Could anyone please help me out.
Error:
Azure AA SMI:
UMI details:
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 6%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Sohail Ali 315 Reputation points Microsoft Employee2024-05-28T07:56:29.17+00:00 What is the powershell version you are using?
Are you also using Hybrid Runbook worker on Azure Automation? -
Sohail Ali 315 Reputation points Microsoft Employee
2024-05-28T07:58:50.36+00:00 Apurva Pathak Could you please share the following details with me :-
What is the powershell version you are using to execute Azure ClI?
Are you using Hybrid Runbook worker on azure Automation?
-
Apurva Pathak 360 Reputation points
2024-05-28T08:10:44.4633333+00:00 Hi @Sohail Ali ,
It is 5.1. Yes, I am running it on Hybrid Worker. On Azure sandbox it works fine.
-
Sohail Ali 315 Reputation points Microsoft Employee
2024-05-29T09:24:11.1466667+00:00 We cannot authenticate to Azure via system identity outside the resource, so using the command
az login --identity with just the CLI will not work as it is by deign
even if we use az login --identity -- username <> it will not persist
Moving forward:
can you let me know what you are trying to accomplish with the command or what is your overall code.
You can use the Azure CLI command with Powershell runbook 7.2 and run the command with system identity
-
Apurva Pathak 360 Reputation points
2024-05-29T09:49:54.07+00:00 Could you please share any doc pertaining to this limitation with az login command. Is it not possible to authenticate using system/ managed identity in Azure CLI. Doesn't it seem like a big flaw?
-
Sohail Ali 315 Reputation points Microsoft Employee
2024-05-29T11:27:08.9366667+00:00 I'm sorry for any misunderstanding caused . There is nothing wrong with the az login command or Azure CLI. You can use them to log in with system identity. The problem I mentioned was with using identity authentication in the cloud shell. The cloud shell may use your user credentials instead of your identity credentials.
The screenshot you shared was from the cloud shell, so I advised you not to use identity authentication in CloudShell there for testing purposes.
You can use system identity and authenticate with CLI commands from the local powershell on the hybrid worker
-
Apurva Pathak 360 Reputation points
2024-05-29T11:57:09.8166667+00:00 I am not using the commands in Cloud shell as specified in the question. It neither working on local PowerShell/ CLI in my laptop nor in the Hybrid Worker.
Sign in to comment