Skip to content

Commit 2b30fac

Browse files
authored
Update instructions for disabling local auth
1 parent 7d52fac commit 2b30fac

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

articles/ai-foundry/how-to/disable-local-auth.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -20,15 +20,15 @@ ms.reviewer: meerakurup
2020
2121
An [Azure AI Foundry](https://ai.azure.com/?cid=learnDocs) hub defaults to use of a shared key to access its default Azure Storage account. With key-based authorization, anyone who has the key and access to the storage account can access data.
2222

23-
To reduce the risk of unauthorized access, you can disable key-based authorization and instead use Microsoft Entra ID for authorization. This configuration uses a Microsoft Entra ID value to authorize access to the storage account. The identity used to access storage is either the user's identity or a managed identity. The user's identity is used to view data in the Azure Machine Learning studio or to run a notebook while authenticated with the user's identity. Machine Learning uses a managed identity to access the storage account. An example is when the managed identity runs a training job.
23+
To reduce the risk of unauthorized access, you can disable key-based authorization and instead use Microsoft Entra ID for authorization. This configuration uses a Microsoft Entra ID value to authorize access to the storage account. The identity used to access storage is either the user's identity or a managed identity. The user's identity is used to view data in Azure Machine Learning studio or to run a notebook while authenticated with the user's identity. Machine Learning uses a managed identity to access the storage account. An example is when the managed identity runs a training job.
2424

2525
Use of your hub with a shared-key disabled storage account is currently in preview.
2626

2727
[!INCLUDE [machine-learning-preview-generic-disclaimer](../../machine-learning/includes/machine-learning-preview-generic-disclaimer.md)]
2828

2929
## Prerequisites
3030

31-
- An existing storage account with shared-key authorization disabled. For more information about the process and implications of disabling shared-key authorization for your storage account, see [Prevent shared-key authorization for an Azure Storage account](/azure/storage/common/shared-key-authorization-prevent).
31+
You need an existing storage account with shared-key authorization disabled. For more information about the process and implications of disabling shared-key authorization for your storage account, see [Prevent shared-key authorization for an Azure Storage account](/azure/storage/common/shared-key-authorization-prevent).
3232

3333
# [Azure portal](#tab/portal)
3434

@@ -53,16 +53,16 @@ Not applicable.
5353

5454
- (Optional) If you have multiple accounts, add the tenant ID of the Microsoft Entra ID that you want to use into `DefaultAzureCredential`. Find your tenant ID in the [Azure portal](https://portal.azure.com) under **Microsoft Entra ID** > **External Identities**.
5555

56-
```python
57-
DefaultAzureCredential(interactive_browser_tenant_id="<TENANT_ID>")
58-
```
56+
```python
57+
DefaultAzureCredential(interactive_browser_tenant_id="<TENANT_ID>")
58+
```
5959

6060
- (Optional) If you're working in the [Azure Government - US](https://azure.microsoft.com/explore/global-infrastructure/government/) or [Azure operated by 21Vianet](/azure/china/overview-operations) regions, you must specify the cloud into which you want to authenticate. You can specify these regions in `DefaultAzureCredential`.
6161

62-
```python
63-
from azure.identity import AzureAuthorityHosts
64-
DefaultAzureCredential(authority=AzureAuthorityHosts.AZURE_GOVERNMENT))
65-
```
62+
```python
63+
from azure.identity import AzureAuthorityHosts
64+
DefaultAzureCredential(authority=AzureAuthorityHosts.AZURE_GOVERNMENT))
65+
```
6666

6767
# [Azure CLI](#tab/cli)
6868

@@ -71,7 +71,7 @@ To use the CLI commands in this document, you need the [Azure CLI](/cli/azure/in
7171
If you use [Azure Cloud Shell](https://azure.microsoft.com//features/cloud-shell/), the CLI is accessed through the browser and it lives in the cloud.
7272

7373
> [!IMPORTANT]
74-
> The steps in this article require the Azure CLI Extension for Machine Learning, version 2.27.0 or later. To determine the version of the extension that you have installed, use the `az version` command from the Azure CLI. In the extensions collection that returns, find the `ml` extension. This code sample shows an example return value:
74+
> The steps in this article require the Azure CLI Extension for Machine Learning, version 2.27.0 or later. To determine the version of the extension that you installed, use the `az version` command from the Azure CLI. In the extensions collection that returns, find the `ml` extension. This code sample shows an example return value:
7575
>
7676
> ```json
7777
> {

0 commit comments

Comments
 (0)