Hello Chinmayi Bose,

Please run this 2 lines at your runbooks and try executing your script accordingly.

#Connect to Azure with system-assigned managed identity

$AzureContext = (Connect-AzAccount -Identity).context

# set and store context

$AzureContext = Set-AzContext -SubscriptionName $AzureContext.Subscription -DefaultProfile $AzureContext

Please find the below error once I added the above to my script.

Can you please verify whether you have enabled the system managed identity for your Automation account or not?

Below is the reference for you. if you still did not enable the system managed identity, please go to the below page and enable it.

Adding the reference steps: https://docs.azure.cn/en-us/automation/enable-managed-identity-for-automation#enable-using-the-azure-portal

Once it enabled then run the provided commands.

Hi,

It is enabled.

Hi Chinmayi Bose 

I have re-replicated the scenario in my environment, and it worked successfully. We tested exporting the MgUser last password change, and the output was successfully stored in the Storage Account. Please find the results below.

We identified two main issues:

1)Error during execution: The error occurs because the user account action in PowerShell is non-interactive when running under an Automation Account.

2)CSV export location: The command Export-Csv Inactive30Days.csv -NoTypeInformation writes the CSV locally to the Automation Account, which is not accessible externally.

Solutions:

Solution for the issue 1: Install the Microsoft Graph module from the PowerShell Gallery. Navigate to Automation account-> Modules->Click on browse gallery

Search for MicrosoftGraphPS and install the module

Solution for the issue 2:

• Export the CSV directly to an Azure Storage Account.
• Create a Storage Account and container if not already available.

Reference document: https://learn.microsoft.com/en-us/answers/questions/1189941/azure-automation-how-to-use-export-csv-in-azure-au

Please find the updated script below: This script adds the connection and CSV export logic. The core PowerShell logic remains the same:

$AzureContext = (Connect-AzAccount -Identity).context
Write-Output "-> Setting context"
$azureContext = Set-AzContext -SubscriptionName $azureContext.Subscription -DefaultProfile $azureContext
 
Write-Output "`n+ Connecting to Graph (Managed Identity)"
Connect-MgGraph -Identity -NoWelcome
# Connect to Microsoft Graph (with required permissions)
 
 $InactiveUsers= @()
$DaysInactive = 30
$CutoffDate = (Get-Date).AddDays(-$DaysInactive)
 # Retrieve all enabled users and sign-in activity
$Users = Get-MgUser -All:$true -Property UserPrincipalName, DisplayName, AccountEnabled, SignInActivity |
         Where-Object AccountEnabled -eq $true
 # Filter users whose last interactive sign-in was before cutoff
$InactiveUsers = $Users |
    Where-Object {
        $.SignInActivity.LastSignInDateTime -and ($.SignInActivity.LastSignInDateTime -lt $CutoffDate)
    } |
    Select-Object DisplayName, UserPrincipalName,
        @{Name="LastSignIn";Expression={$_.SignInActivity.LastSignInDateTime}}
 $InactiveUsers | Format-Table -AutoSize
 
 $InactiveUsers | ft DisplayName, UserPrincipalName,LastSignIn
Write-Host $VM_ARRAY
$InactiveUsers | Export-CSV ($env:TEMP+"Inactiveusers.csv") -Notype
 
"upload AutomationFile123.csv file to storage account"
$Context = New-AzStorageContext -StorageAccountName "" -StorageAccountKey ""
Set-AzStorageBlobContent -Context $Context -Container "test" -File ($env:TEMP+"Inactiveusers.csv") -Blob "Inactiveusers.csv" -Force

Please let me know if you face any challenge here, I can help you to resolve this issue further

If the comment was helpful, please click "Upvote"