restart-azanalysisservicesInstance：响应状态代码未表示成功：401（未经授权）

Question

我有一个带有S1 SKU的Azure Analysis Services。有一个SPN在AAS上拥有所有者RBAC。我试图通过自动化帐户使用PowerShell 5.1 Runbook来运行restart-azanalysisservicesInstance cmdlet。

When I run the Runbook, I get to see the error:

Restart-AzAnalysisServicesInstance : Response status code does not indicate success: 401 (Unauthorized).

However, when I run the cmdlet locally, using my credentials to Connect-AzAccount in Windows Powershell ISE, it works.我也是AAS的所有者。

Here's the Runbook:

    # Init
    $ErrorActionPreference = 'Stop'
    $AutomationAccountConnectionName = "Name of my Connection that uses the Owner SPN" 

    # Get Automation connection (SPN connection details)
    $servicePrincipalConnection = Get-AutomationConnection -Name $AutomationAccountConnectionName 
    Write-Output "Connected using SPN:"
    $servicePrincipalConnection

    # Connect using SPN
    Write-Output "Connecting to AZ using the SPN connection:"
    $Connection | ConvertTo-Json
    $azContext = Connect-AzAccount -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint `
        -ApplicationId $servicePrincipalConnection.ApplicationId `
        -Tenant $servicePrincipalConnection.TenantId -ServicePrincipal
    Write-Output ("Connected to azure using certificate with app id : " + $Connection.AppId)
    
   # Get AAS
    $aasServer = "test113aas"
    $subscriptionId = "GUID of my azure subscrition"
    Select-AzSubscription -Subscription $subscriptionId
    $resourceObj = Get-AzAnalysisServicesServer -Name $aasServer 
    $ResourceObj
    $AnalysisServer = $resourceObj.Name
    $AnalysisServerLocation = 'northeurope'
    $ModelName = 'adventureworks'

    # # Connect AAS Account => This did not help as well
    # Write-Host "Adding AAS Account"
    # Add-AzAnalysisServicesAccount -RolloutEnvironment "$AnalysisServerLocation.asazure.windows.net" `
    #     -ServicePrincipal -ApplicationId $servicePrincipalConnection.ApplicationId `
    #   -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint -TenantId $servicePrincipalConnection.TenantId
    
    # Restart AAS server
    Write-Host "Server's full name is $($resourceObj.ServerFullName)"
    Write-Host "$AnalysisServer : Preparing to Restart the Analysis Server"
    $result = Restart-AzAnalysisServicesInstance –Instance $resourceObj.ServerFullName -PassThru # returns true if successful
    $result

Any idea as to what I am missing out here?文档：

I even tried running the same within an Azure PowerShell Core Function, since the文档是针对PowerShell 7+的，但无济于事。

Answer 1

事实证明，我们需要在调用cmdlet之前先对客户端的IP进行白名单。

错误消息可能更精确。