I created a new app, which create an "automation" account.

When I use the client ID and client secret to connect using the Python SDK, I have access to everything even I didn't assign any rights to the automation account.

Is this a normal behavior? Is there a way to restrict access to this account?

Thanks