As a Platform Team we want to create and define Building Blocks which follows security principals regarding the permission for the azure automation user.

SPNs often requires higher permission (or more privileges RBAC roles) than actually required.

Therefore providing a way to authenticate e.g. via AZ CLI or other means for normal users (Entra Users) for the automation instead of SPNs would be required.

Actual examples of the limitation of SPNs and required need of higher permissions: