Azure Runbook using managed identity 401 unauthorized

[nicolaibaralmueller]

Hi,

I am using Azure Automation account with managed identity. The MI has the following API permissions:

Logging in with my global admin account using the MI works fine.
Connect-PnPOnline -Url $url -Interactive -ClientId $clientId -ReturnConnection

However, when executing the runbook I receive a 401 unauthorized after login.

try{
    Connect-AzAccount -Identity
    $token = (Get-AzAccessToken -ResourceUrl "https://graph.microsoft.com/.default" -AsSecureString -WarningAction Ignore).Token
    $conn = Connect-PnPOnline -Url $url -Accesstoken $token -ReturnConnection
    Write-Output "Connected to url: $($url)"
}catch{
    Write-Output "Connection failed."
    Write-Error $_
}

try{
    $files = Get-PnPFileInFolder -FolderSiteRelativeUrl $relativeUrl -Recurse -Connection $conn
    foreach($file in $files) {
        $file.Name
    }    
}catch{
    Write-Error $_
}

Giving the MI Sharepoint Administrator role also results in (401) Unauthorized.

I am very confused what is missing???

[dandraka]

Hi @nicolaibaralmueller , which line are you getting the error in? Is it the one with Get-AzAccessToken?