> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/azure-identities/azure-resource-management/automation-accounts.md).

# Automation Accounts

Analyze, search and export all Automation accounts.

The `Automation Accounts` page provides a list of enumerated Azure Automation accounts. The list contains the `Name`, `Risk (%)`, `Exposure Point` and `Issue Counts`.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-509ef7b9561432f930b81d0e9c6a49996c8e870f%2FautomationAccounts_list.PNG?alt=media" alt=""><figcaption><p>Automation Accounts</p></figcaption></figure>

#### Automation Accounts Details

Details page contains the `Risk Score` of the automation account, `Exposure Point` and `Information` panes.

> Info You can analyze objects in the `Graph module` by clicking the `Visualize` button on the upper left side of the `Information Pane`.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-f1b6485d0ee1220445d821e2e3e2659c51695f2e%2FautomationAccounts_details.PNG?alt=media" alt=""><figcaption><p>Automation Accounts Details</p></figcaption></figure>

#### Information

`Information Pane` contains `Details` and `Managed Identities` tabs.

#### Details

Details tab contains attributes below about the automation account.

| Attribute             | Description                                                                   |
| --------------------- | ----------------------------------------------------------------------------- |
| Name                  | The display name of the automation account with tenant suffix                 |
| Location              | The Azure region where the automation account is deployed                     |
| State                 | The current state of the automation account (e.g., Ok)                        |
| SKU Name              | The SKU name of the automation account (e.g., Basic, Free)                    |
| Public Network Access | Indicates whether public network access is enabled for the automation account |
| Disable Local Auth    | Indicates whether local authentication (shared keys) is disabled              |
| Creation Time         | The date and time when the automation account was created                     |
| Last Modified Time    | The date and time when the automation account was last modified               |
| Tenant                | The tenant the automation account belongs to                                  |
| Resource Group        | The resource group the automation account is associated with                  |

**Runtime**

When runtime configuration is available, the following attributes are shown in a separate **Runtime** section.

| Attribute                 | Description                                                                                       |
| ------------------------- | ------------------------------------------------------------------------------------------------- |
| Default Runtime Version   | The default PowerShell runtime version used by runbooks in the automation account                 |
| Hybrid Worker Service URL | The hybrid worker service URL used by hybrid runbook workers connected to this automation account |

#### Managed Identities

The `Managed Identities` tab lists Azure Active Directory service principals (managed identities) assigned to the automation account. A managed identity lets the automation account (and the runbooks executing in it) authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this automation account, so these identities are part of its attack surface.

| Attribute    | Description                                                 |
| ------------ | ----------------------------------------------------------- |
| Name         | The display name of the managed identity with tenant suffix |
| Display Name | The display name of the service principal                   |
| Type         | The service principal type (e.g., ManagedIdentity)          |

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-e05877ea92ccddf20de5fd8be4bf522160440239%2FautomationAccounts_managedIdentites.PNG?alt=media" alt=""><figcaption><p>Managed Identities</p></figcaption></figure>