Merge pull request #351 from MicrosoftDocs/main

9/18/2024 AM Publish

Author: Taojunshen

articles/machine-learning/breadcrumb/toc.yml

@@ -58,6 +58,22 @@ items:
         tocHref: /azure/architecture/data-guide/
         topicHref: /azure/architecture/data-guide/index
 
+- name: Azure
+  tocHref: /azure/
+  topicHref: /azure/index
+  items:
+  - name: Machine Learning
+    tocHref: /azure/architecture/
+    topicHref: /azure/machine-learning/index
+    items:
+    - name: Service
+      tocHref: /azure/architecture/ai-ml/guide/
+      topicHref: /azure/machine-learning/index
+      items:
+      - name: Data Architecture Guide
+        tocHref: /azure/architecture/ai-ml/
+        topicHref: /azure/architecture/ai-ml/index
+
 - name: Azure
   tocHref: /azure/
   topicHref: /azure/index
@@ -74,6 +90,7 @@ items:
         tocHref: /azure/devops/pipelines/languages/
         topicHref: /azure/devops/pipelines/index
 
+# Security baseline
 - name: Azure
   tocHref: /security/
   topicHref: /azure/index
@@ -89,4 +106,12 @@ items:
       - name: Security benchmarks
         tocHref: /security/benchmark/azure/
         topicHref: /security/benchmark/azure/index
- 
+ 
+# AI Studio or Azure ML
+- name: Azure
+  tocHref: /ai/
+  topicHref: /azure/index
+  items:
+  - name: Machine Learning
+    tocHref: /ai/
+    topicHref: /azure/machine-learning/index

articles/machine-learning/how-to-administrate-data-authentication.md

@@ -55,11 +55,13 @@ In general, identity-based data authentication involves these checks:
     - Does the user identity or the compute managed identity have the necessary permissions for that storage resource? Permissions are granted by using Azure RBAC.
     - The storage account [Reader](/azure/role-based-access-control/built-in-roles#reader) reads the storage metadata.
     - The [Storage Blob Data Reader](/azure/role-based-access-control/built-in-roles#storage-blob-data-reader) reads and lists storage containers and blobs.
+    - The [Storage File Data Privileged Reader](/azure/role-based-access-control/built-in-roles#storage-file-data-privileged-reader) reaeds and lists files and directories in Azure file shares.
     - For more information, visit [Azure built-in roles for storage](/azure/role-based-access-control/built-in-roles/storage).
 * Does this user have write permission for the resource?
     - Does the user identity or the compute managed identity have the necessary permissions for that storage resource? Permissions are granted by using Azure RBAC.
     - The storage account [Reader](/azure/role-based-access-control/built-in-roles#reader) reads the storage metadata.
     - The [Storage Blob Data Contributor](/azure/role-based-access-control/built-in-roles#storage-blob-data-contributor) reads, writes, and deletes Azure Storage containers and blobs.
+    - The [Storage File Data Privileged Contributor](/azure/role-based-access-control/built-in-roles#storage-file-data-privileged-contributor) reads, writes, deletes, and modifies access control lists on files and directories in Azure file shares.
     - For more information, visit [Azure built-in roles for storage](/azure/role-based-access-control/built-in-roles/storage).
 
 ## Other general checks for authentication