> For the complete documentation index, see [llms.txt](https://docs.smsagent.blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.smsagent.blog/microsoft-endpoint-manager-reporting/automating-data-exports-from-microsoft-graph/azure-automation-account/create-configure-an-azure-automation-account.md).

# Create / configure an Azure automation account

## Video guide

Here is a video guide which I created for the Patch My PC report which covers the steps outlined below and for setting the API permissions.

{% embed url="<https://youtu.be/RSYhw-CZ8XI>" %}

## Create an Azure automation account

If you don't have one already, create an [Automation account](https://docs.microsoft.com/en-us/azure/automation/automation-create-standalone-account) in Azure.&#x20;

{% hint style="info" %}
If you wish to use a **Run as account** to access Microsoft Graph and Azure resources be sure to select that option, however I strongly recommend using a **Managed Identity** instead.
{% endhint %}

## Enable a Managed Identity

In the Azure portal, locate your automation account. Under **Identity**, enable a **System assigned** identity. The identity will bear the same name as your automation account and will be visible as a service principal in Azure Enterprise applications.

![](/files/-M_RFBTlnLlW0a9uBNfX)

You do not need to assign a role in Azure to this identity.