workspace delete_dependent_resources does not work for non-public clouds (#36891)

Co-authored-by: Josh Harrington <[email protected]>

Author: joshharrin

sdk/ml/azure-ai-ml/azure/ai/ml/_utils/_workspace_utils.py

@@ -6,7 +6,7 @@
 import random
 import uuid
 
-from azure.ai.ml._azure_environments import _get_base_url_from_metadata
+from azure.ai.ml._azure_environments import _get_base_url_from_metadata, _resource_to_scopes
 from azure.ai.ml._vendor.azure_resources._resource_management_client import ResourceManagementClient
 from azure.ai.ml._vendor.azure_resources.models import GenericResource
 from azure.ai.ml.constants._common import ArmConstants
@@ -31,11 +31,13 @@ def get_deployment_name(name: str):
 
 
 def get_resource_group_location(credentials: TokenCredential, subscription_id: str, resource_group_name: str) -> str:
+    arm_hostname = _get_base_url_from_metadata()
     client = ResourceManagementClient(
         credential=credentials,
         subscription_id=subscription_id,
-        base_url=_get_base_url_from_metadata(),
+        base_url=arm_hostname,
         api_version=ArmConstants.AZURE_MGMT_RESOURCE_API_VERSION,
+        credential_scopes=_resource_to_scopes(arm_hostname),
     )
     rg = client.resource_groups.get(resource_group_name)
     return rg.location
@@ -48,11 +50,13 @@ def get_generic_arm_resource_by_arm_id(
     api_version: str,
 ) -> GenericResource:
     if arm_id:
+        arm_hostname = _get_base_url_from_metadata()
         client = ResourceManagementClient(
             credential=credentials,
             subscription_id=subscription_id,
-            base_url=_get_base_url_from_metadata(),
+            base_url=arm_hostname,
             api_version=ArmConstants.AZURE_MGMT_RESOURCE_API_VERSION,
+            credential_scopes=_resource_to_scopes(arm_hostname),
         )
         return client.resources.get_by_id(arm_id, api_version)
     return None
@@ -65,11 +69,13 @@ def delete_resource_by_arm_id(
     api_version: str,
 ) -> None:
     if arm_id:
+        arm_hostname = _get_base_url_from_metadata()
         client = ResourceManagementClient(
             credential=credentials,
             subscription_id=subscription_id,
-            base_url=_get_base_url_from_metadata(),
+            base_url=arm_hostname,
             api_version=ArmConstants.AZURE_MGMT_RESOURCE_API_VERSION,
+            credential_scopes=_resource_to_scopes(arm_hostname),
         )
         client.resources.begin_delete_by_id(arm_id, api_version)