Trying to use Azure Automation with flow in GCC

(0) Share

Report

Posted on by JustKarl

I'm trying to create a flow to run my workbook which is on https://portal.azure.com

My flow is on https://gov.flow.microsoft.us/

When I attempt to use the Azure Automation action "Create job" the login takes me to https://login.microsoftonline.us/ when I need to login into https://login.microsoftonline.com/

When I attempt to connect with a service principal it cannot find my subscription with the error
Could not retrieve values. The dynamic invocation request failed with error: {
"error": {
"code": "AuthenticationFailed",
"message": "Authentication failed. The 'Authorization' header is missing."
}
}.

Is it not possible to use Azure Automation on a flow from GCC to commercial Azure AD?

Categories:

General topics

I have the same question (0)

All responses (4)

Answers (0)

eric-cheng 5,171 on at

Like (0)

Report
Copy link

Link copied!

Hi @JustKarl ,

Based on the docs for Azure Automation, there doesn't appear to be any limitations for Azure Automation and GCC.

When you create a connection from Power Automate, you can either specify to create a connection via OAuth or a service principal. You mentioned you had to log in? Is this all you have done or have you created an app registration in AAD?

I personally haven't tried running an Azure Automation with a service principal but looks like some additional setup and permissions is required to get it running as a run as account here.

--------------------------------------------------------------------------
If I have answered your question, please mark my post as a solution
If you have found my response helpful, please give it a thumbs up

Connect on LinkedIn

Was this reply helpful? Yes No
JustKarl 4 on at

Like (0)

Report
Copy link

Link copied!

Hello,
When I attempt to connect via OAuth I am told my account does not exist. When I look up my organization it cannot be found either. We don't have accounts on the government tenant https://login.microsoftonline.us/.

I've created my service account, and have the client secret.

When I attempt to connect I enter the following data on the first screen of the Service Principal screen
I click Create and am presented with a screen with the following fields:

If I enter the Subscription ID and click the resource group name field the Subscription ID field clears out.

Was this reply helpful? Yes No
JustKarl 4 on at

Like (0)

Report
Copy link

Link copied!

I managed to open a case with Microsoft by going from the Azure side as I cannot from Power Automate (Again with the cannot login).
This is the response:

Since you are in GCC moderate which uses LogicApps in AzureGov, some power automate connectors are unable to authenticate to the commercial azure cloud.

Was this reply helpful? Yes No
ozesati 2 on at

Like (0)

Report
Copy link

Link copied!

We are faced with same issue. LogicApps in GCC while Azure tenant is commercial. Does anyone know if this issues has been resolved? It's been some time since post.

Was this reply helpful? Yes No