Azure Automation
An Azure service that is used to automate, configure, and install updates across hybrid environments.
1,241 questions
Automating Domain Unjoin When Deleting VMSS Instance
Santosh Patil
5
Reputation points
Hello,
I am trying to create an automation that unjoins a domain when an alert triggers for VM deletion. I have set up a single VMSS, an alert, two action groups (for email and automation), and an Azure automation account runbook.
When attempting to destroy an instance in VMSS, I receive emails from the email action group, but there is no indication of an automation action group. Trying the "Test" button in the Automation action group results in an "HTTP 401: The Automation Runbook returned a 'Unauthorized' error." message. I'm not sure which permissions I need to set up and where. I have tried various permissions, but none of them seemed to work.
Thank you, Santosh Patil
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 20%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPR%3C/text%3E%3C/svg%3E)
Pranay Reddy Madireddy 5 Reputation points Microsoft Vendor2024-09-10T12:58:22.85+00:00 Hii Santosh Patil
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
To check your Azure Automation Runbook, go to the Azure Portal and find your Automation Account. Click on "Runbooks," select the one you’re interested in, and ensure it is published and working properly.
For your Automation Runbooks to work, they need special permissions. Ensure that your Automation Account has either a managed identity or a service principal set up. This allows the runbook to access and control Azure resources securely.
In the Azure Portal, go to the resource (like a VMSS) that your runbook will work with. In the Access Control (IAM) section, give the managed identity or service principal of your Automation Account a role like Contributor. This allows the runbook to make changes, such as deleting VMSS instances, as needed.
In the Azure Portal, go to your Action Groups and check that the Webhook action is correctly set up with the URL of your Automation Runbook. Test the Action Group to make sure the webhook is working and that there are no authorization errors.
Make sure the webhook URL is correct and used in the action group. Ensure the URL is secure and has the right IP settings. Also, check that any required parameters for the runbook are set and passed correctly.
Check the runbook’s Jobs section for any errors or messages about why it’s not working. Also, look at the Azure Activity Logs for any issues or permission problems.
Ensure the alert rule is set up correctly to trigger the action group. Verify that the alert conditions are right and that the action group activates when those conditions are met.
For reference, please review this documentation: https://video2.skills-academy.com/en-us/azure/automation/automation-hybrid-runbook-worker
If you have any further queries, do let us know.
If the answer is helpful, please click "Accept Answer" and "Upvote it".
-
Pranay Reddy Madireddy 5 Reputation points Microsoft Vendor
2024-09-12T09:25:23.91+00:00 Hii Santosh Patil
If you had a chance to see my comment to your question. If it was helpful, please click "Upvote" on my post let us know Thank you...! -
Santosh Patil 5 Reputation points
2024-09-12T13:57:45.2633333+00:00 Hi,
basically, I am looking for alert should be trigger when there is event for vim instance delete and alert should carry vim instance name, computer name, data disk name to azure automation account for further process.
Sign in to comment
Sign in to answer