Azure PowerShell-Runbook

Asked Jul 01 '20 at 10:47

Active Jul 01 '20 at 15:09

Viewed 94 times

Working on this as below - Using a power-shell script inside the Automation Account for run-book. The power-shell script will help in adding a rule inside the resource of the function-app of the networking rule. But somehow the following happens -

Not able to login the azure account
And it says Subscription ID doesn't exists. (Login is done via Service principle)

Code for reference

$azureAplicationId="XXXX" 
$azureTenantId="XXXXX" 
$azurePassword=ConvertToSecureString "XXXXXX" -AsPlainText -Force 
$psCred=New-Object System.Management.Automation.PSCredential($azureAplicationId ,$azurePassword) 
Login-AzureRmAccount -Credential $psCred -TenantId $azureTenantId -ServicePrincipal 
Select-AzureSubscription -SubscriptionId "XXXXXX" 
Add-AzWebAppAccessRestrictionRule -ResourceGroupName "XXXXX" -WebAppName "XXXXX" -Name "iprule" -Priority 100 -Action Allow -IpAddress x.x.x.x/x –

edited Jul 01 '20 at 15:09

Rafał Warzycha

asked Jul 01 '20 at 10:47

Anirudh Bragadeesan

Message after running the runbook - The subscription id XXXX doesn't exis – Anirudh Bragadeesan Jul 01 '20 at 11:11
1

For readability, you can use ``` code ``` block and specify a bit more info on user account. – Rafał Warzycha Jul 01 '20 at 11:45
Thanks! What Am making to understand is - When i run the above powershell code, It has the message like subscription doesnt exists. – Anirudh Bragadeesan Jul 01 '20 at 12:45
You wanted me explain anything Please let me know. – Anirudh Bragadeesan Jul 01 '20 at 12:46
Can someone Please help me in the above errors am getting: 1.When I m executing line 1-5 Login via service principle am getting logged in correctly 2. When I add Line to add IP rule to function app and execute it -it says client sub cant be null. 3. When I try to eradicate the above error and use line 6 as select-Azure Subscription,it says sub id doesnt exists. – Anirudh Bragadeesan Jul 02 '20 at 05:31
1

@AnirudhBragadeesan Have you configured Azure RABC role for the service principal in the subscription : https://learn.microsoft.com/en-us/azure/role-based-access-control/overview. – Jim Xu Jul 03 '20 at 03:29
No I didn't do that. – Anirudh Bragadeesan Jul 04 '20 at 11:10
But I have added roles assignment for service principle and added Contributor role to the service principle i had created. – Anirudh Bragadeesan Jul 04 '20 at 11:13
Now the error client subscription ID cannot be null isn't coming and hence my problem has been resolved. – Anirudh Bragadeesan Jul 04 '20 at 11:14
@AnirudhBragadeesan, please add an answer to this question. – Ivan Glasenberg Jul 15 '20 at 02:53
Sure-Answer is already shared above.No Problem I will share it here once again. – Anirudh Bragadeesan Jul 16 '20 at 06:08
I added the Contributor Role to the Service Principal. – Anirudh Bragadeesan Jul 16 '20 at 06:09

Azure PowerShell-Runbook

0 Answers0