Skip to content

Commit 0f23a47

Browse files
committed
edits
1 parent 64e9954 commit 0f23a47

File tree

2 files changed

+10
-8
lines changed

2 files changed

+10
-8
lines changed

articles/ai-studio/how-to/built-in-policy-model-deployment.md

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: Blackmist
66
ms.author: larryfr
77
ms.service: azure-ai-studio
88
ms.topic: how-to #Don't change
9-
ms.date: 10/02/2024
9+
ms.date: 10/25/2024
1010

1111
#customer intent: As an admin, I want control what Managed AI Services (MaaS) and Model-as-a-Platform (MaaP) AI models can be deployed by my developers.
1212

@@ -25,19 +25,21 @@ Azure Policy provides built-in policy definitions that help you govern the deplo
2525
## Enable the policy
2626

2727
1. From the [Azure portal](https://portal.azure.com), select **Policy** from the left side of the page. You can also search for **Policy** in the search bar at the top of the page.
28-
1. From the left side of the Azure Policy Dashboard, select **Authoring**, **Definition**, and then search for "[Preview]: Azure Machine Learning Deployments should only use approved Registry Models" in the search bar within the page. You can also directly navigate to policy definition creation page by clicking [here](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F12e5dd16-d201-47ff-849b-8454061c293d).
29-
1. Click on **Assign** to assign the policy to the appropiate management group:
28+
1. From the left side of the Azure Policy Dashboard, select **Authoring**, **Definition**, and then search for "[Preview]: Azure Machine Learning Deployments should only use approved Registry Models" in the search bar within the page. You can also directly navigate to [policy definition creation page](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F12e5dd16-d201-47ff-849b-8454061c293d).
29+
1. Select on **Assign** to assign the policy to the management group:
3030

3131
- **Scope**: Select the scope where you want to assign the policy. The scope can be a management group, subscription, or resource group.
32-
- **Policy definition**: this section should be pre-filled by "**[Preview]: Azure Machine Learning Deployments should only use approved Registry Models**".
32+
- **Policy definition**: this section should already have a value of "**[Preview]: Azure Machine Learning Deployments should only use approved Registry Models**".
3333
- **Assignment name**: Enter a unique name for the assignment.
3434

3535
The rest of the fields can be left as their default values or you can customize as needed for your organization.
3636

3737
1. Select **Next** at the bottom of the page or the **Parameters** tab at the top of the page.
38-
1. In the **Parameters** tab, un-check "Only show parameteres that needs input 0or review" to see all fields:
38+
1. In the **Parameters** tab, deselect **Only show parameters that needs input or review** to see all fields:
3939

40-
- **Effect**: ensure these is filed is set to [**Deny**](/azure/governance/policy/concepts/effect-deny). Note: [audits](/azure/governance/policy/concepts/effect-audit) option allows you to configure the policy to log information to your own compliance dashboard.
40+
- **Effect**: Set to [**Deny**](/azure/governance/policy/concepts/effect-deny).
41+
> [!NOTE]
42+
> Using the [audit](/azure/governance/policy/concepts/effect-audit) option allows you to configure the policy to log information to your own compliance dashboard.
4143
- **Allowed Models Publishers**: This field expects a list of **publisher's name** in quotation and separated by commas.
4244
- **Allowed Asset Ids**: This field expects a list of **model asset ids** in quotation and separated by commas.
4345

@@ -46,7 +48,7 @@ Azure Policy provides built-in policy definitions that help you govern the deplo
4648
1. Go to the [Azure AI Studio model catalog](model-catalog-overview.md).
4749

4850

49-
1. For each model you want to allow, select the model to view the details. In the model detail information, copy the **Model ID** value. For example, the value might look like `azureml://registries/azure-openai/models/gpt-35-turbo/versions/3` for GPT-3.5-Turbo model. The provide names are also "Collections" in model catalog. for instance, publisher for "Meta-Llama-3.1-70B-Instruct" model is Meta.
51+
1. For each model you want to allow, select the model to view the details. In the model detail information, copy the **Model ID** value. For example, the value might look like `azureml://registries/azure-openai/models/gpt-35-turbo/versions/3` for GPT-3.5-Turbo model. The provided names are also *Collections* in model catalog. For example, the publisher for "Meta-Llama-3.1-70B-Instruct" model is Meta.
5052

5153
> [!IMPORTANT]
5254
> The model ID value must be an exact match for the model. If the model ID is not an exact match, the model won't be allowed.

articles/ai-studio/how-to/custom-policy-model-deployment.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: Blackmist
66
ms.author: larryfr
77
ms.service: azure-ai-studio
88
ms.topic: how-to #Don't change
9-
ms.date: 10/02/2024
9+
ms.date: 10/25/2024
1010

1111
#customer intent: As an admin, I want control what Azure AI services and Azure OpenAI models can be deployed by my developers.
1212

0 commit comments

Comments
 (0)