Forum Discussion

Ben Curran's avatar
Ben Curran
Brass Contributor
Jan 08, 2021

Restricting global admin powershell scheduled task

Hi,   Hoping someone can help me. I have a global admin account which runs a powershell script weekly from an Azure VM on an internal network with no public IP. I would like to restrict this accoun...
security
Daniel_Fors's avatar
Daniel_Fors
Copper Contributor
Jan 12, 2021

Ben Curran 
As Thijs mentioned, I would stay away from scripts running as GA.
And is this VM only for this script? Maybe consider moving this script to a Workbook and schedule, or if you need logs etc, maybe an Azure Function. Then there is no worry about IP and blocking this script from ever "leaving" Azure.

Of course, depends on what the script does, but if it needs GA, it sounds like it runs towards Azure services.

  • Ben Curran's avatar
    Ben Curran
    Brass Contributor
    Jan 14, 2021

    Hi both, thanks for your input. I have done some further investigation and it looks like we may be able to use an automation account for this task. I agree I also dont like using any account with GA for any task if it can be avoided. I'll see how we get on with this new direction and if it doesnt work, will look at what you have recommended

     

    Thanks 

Resources