You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-studio/concepts/ai-resources.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -81,9 +81,9 @@ While projects show up as their own tracking resources in the Azure portal, they
81
81
82
82
## Connections to Azure and third-party resources
83
83
84
-
Azure AI offers a set of connectors that allows you to connect to different types of data sources and other Azure tools. You can take advantage of connectors to connect with data such as indices in Azure AI Search to augment your flows.
84
+
Azure AI offers a set of connectors that allows you to connect to different types of data sources and other Azure tools. You can take advantage of connectors to connect with data such as indexes in Azure AI Search to augment your flows.
85
85
86
-
Connections can be set up as shared with all projects in the same hub, or created exclusively for one project. To manage project connections via Azure AI Studio, navigate to a project page, then navigate to **Project settings** > **Connections**. To manage shared connections, navigate to the **Manage** page. As an administrator, you can audit both shared and project-scoped connections on a hub level to have a single pane of glass of connectivity across projects.
86
+
Connections can be set up as shared with all projects in the same hub, or created exclusively for one project. To manage project connections via Azure AI Studio, go to your project and then select **Settings** > **Connections**. To manage shared connections for a hub, go to your hub settings. As an administrator, you can audit both shared and project-scoped connections on a hub level to have a single pane of glass of connectivity across projects.
87
87
88
88
## Azure AI dependencies
89
89
@@ -113,9 +113,9 @@ In the Azure portal, you can find resources that correspond to your project in A
113
113
> This section assumes that the hub and project are in the same resource group.
114
114
1. In [Azure AI Studio](https://ai.azure.com), go to a project and select **Settings** to view your project resources such as connections and API keys. There's a link to your hub in Azure AI Studio and links to view the corresponding project resources in the [Azure portal](https://portal.azure.com).
115
115
116
-
:::image type="content" source="../media/concepts/azureai-project-view-ai-studio.png" alt-text="Screenshot of the project and related resources in the Azure AI Studio." lightbox="../media/concepts/azureai-project-view-ai-studio.png":::
116
+
:::image type="content" source="../media/concepts/azureai-project-view-ai-studio.png" alt-text="Screenshot of the AI Studio project overview page with links to the Azure portal." lightbox="../media/concepts/azureai-project-view-ai-studio.png":::
117
117
118
-
1. Select **Manage in the Azure Portal** to see your hub in the Azure portal.
118
+
1. Select **Manage in Azure Portal** to see your hub in the [Azure portal](https://portal.azure.com).
Copy file name to clipboardExpand all lines: articles/ai-studio/concepts/architecture.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -75,15 +75,15 @@ For more information, see [Role-based access control in Azure AI Studio](rbac-ai
75
75
76
76
## Attribute-based access control
77
77
78
-
Each AI hub you create has a default storage account. Each child AI project of the AI hub inherits the storage account of the AI hub. The storage account is used to store data and artifacts.
78
+
Each hub you create has a default storage account. Each child project of the hub inherits the storage account of the hub. The storage account is used to store data and artifacts.
79
79
80
-
To secure the shared storage account, Azure AI Studio uses both Azure RBAC and Azure attribute-based access control (Azure ABAC). Azure ABAC is a security model that defines access control based on attributes associated with the user, resource, and environment. Each AI project has:
80
+
To secure the shared storage account, Azure AI Studio uses both Azure RBAC and Azure attribute-based access control (Azure ABAC). Azure ABAC is a security model that defines access control based on attributes associated with the user, resource, and environment. Each project has:
81
81
82
82
- A service principal that is assigned the Storage Blob Data Contributor role on the storage account.
83
83
- A unique ID (workspace ID).
84
-
- A set of containers in the storage account. Each container has a prefix that corresponds to the workspace ID value for the AI project.
84
+
- A set of containers in the storage account. Each container has a prefix that corresponds to the workspace ID value for the project.
85
85
86
-
The role assignment for each AI project's service principal has a condition that only allows the service principal access to containers with the matching prefix value. This condition ensures that each AI project can only access its own containers.
86
+
The role assignment for each project's service principal has a condition that only allows the service principal access to containers with the matching prefix value. This condition ensures that each project can only access its own containers.
87
87
88
88
> [!NOTE]
89
89
> For data encryption in the storage account, the scope is the entire storage and not per-container. So all containers are encrypted using the same key (provided either by Microsoft or by the customer).
@@ -92,10 +92,10 @@ For more information on Azure access-based control, see [What is Azure attribute
92
92
93
93
## Containers in the storage account
94
94
95
-
The default storage account for an AI hub has the following containers. These containers are created for each AI project, and the `{workspace-id}` prefix matches the unique ID for the AI project. The container is accessed by the AI project using a [connection](connections.md).
95
+
The default storage account for a hub has the following containers. These containers are created for each project, and the `{workspace-id}` prefix matches the unique ID for the project. The container is accessed by the project using a [connection](connections.md).
96
96
97
97
> [!TIP]
98
-
> To find the ID for your AI project, go to the AI project in the [Azure portal](https://portal.azure.com/). Expand **Settings** and then select **Properties**. The **Workspace ID** is displayed.
98
+
> To find the ID for your project, go to the project in the [Azure portal](https://portal.azure.com/). Expand **Settings** and then select **Properties**. The **Workspace ID** is displayed.
99
99
100
100
| Container name | Connection name | Description |
Copy file name to clipboardExpand all lines: articles/ai-studio/concepts/rbac-ai-studio.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -153,7 +153,7 @@ If the built-in roles are insufficient, you can create custom roles. Custom role
153
153
154
154
When configuring a hub to use a customer-managed key (CMK), an Azure Key Vault is used to store the key. The user or service principal used to create the workspace must have owner or contributor access to the key vault.
155
155
156
-
If your Azure AI hub is configured with a **user-assigned managed identity**, the identity must be granted the following roles. These roles allow the managed identity to create the Azure Storage, Azure Cosmos DB, and Azure Search resources used when using a customer-managed key:
156
+
If your AI Studio hub is configured with a **user-assigned managed identity**, the identity must be granted the following roles. These roles allow the managed identity to create the Azure Storage, Azure Cosmos DB, and Azure Search resources used when using a customer-managed key:
157
157
158
158
-`Microsoft.Storage/storageAccounts/write`
159
159
-`Microsoft.Search/searchServices/write`
@@ -175,7 +175,7 @@ An Azure Container Registry instance is an optional dependency for Azure AI Stud
175
175
| AI Studio hub system-assigned managed identity | ✓ | ✓ |
176
176
| AI Studio hub user-assigned managed identity </br>with the **ACRPull** role assigned to the identity || ✓ |
177
177
178
-
A system-assigned managed identity is automatically assigned to the correct roles when the Azure AI hub is created. If you're using a user-assigned managed identity, you must assign the **ACRPull** role to the identity.
178
+
A system-assigned managed identity is automatically assigned to the correct roles when the hub is created. If you're using a user-assigned managed identity, you must assign the **ACRPull** role to the identity.
179
179
180
180
## Scenario: Use Azure Application Insights for logging
Copy file name to clipboardExpand all lines: articles/ai-studio/concepts/safety-evaluations-transparency-note.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,7 +41,7 @@ The Azure AI Studio safety evaluations let users evaluate the output of their ge
41
41
42
42
### System behavior
43
43
44
-
Azure AI Studio provisions an Azure Open AI GPT-4 model and orchestrates adversarial attacks against your application to generate a high quality test dataset. It then provisions another GPT-4 model to annotate your test dataset for content and security. Users provide their generative AI application endpoint that they wish to test, and the safety evaluations will output a static test dataset against that endpoint along with its content risk label (Very low, Low, Medium, High) and reasoning for the AI-generated label.
44
+
Azure AI Studio provisions an Azure OpenAI GPT-4 model and orchestrates adversarial attacks against your application to generate a high quality test dataset. It then provisions another GPT-4 model to annotate your test dataset for content and security. Users provide their generative AI application endpoint that they wish to test, and the safety evaluations will output a static test dataset against that endpoint along with its content risk label (Very low, Low, Medium, High) and reasoning for the AI-generated label.
Copy file name to clipboardExpand all lines: articles/ai-studio/how-to/configure-managed-network.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -152,7 +152,7 @@ Before following the steps in this article, make sure you have the following pre
152
152
153
153
### Connectivity to other services
154
154
155
-
* Azure AI services provisioned with Azure AI hub and Azure AI Search attachedwith Azure AI hub should be public.
155
+
* Azure AI services provisioned with Azure AIStudio hub and Azure AI Search attached should be public.
156
156
* The "Add your data" feature in the Azure AI Studio playground doesn't support using a virtual network or private endpoint on the following resources:
Copy file name to clipboardExpand all lines: articles/ai-studio/how-to/connections-add.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -69,11 +69,11 @@ If your hub is configured for [network isolation](configure-managed-network.md),
69
69
70
70
To create an outbound private endpoint rule to the data source, use the following steps:
71
71
72
-
1. Sign in to the [Azure portal](https://portal.azure.com), and select the Azure AI hub.
72
+
1. Sign in to the [Azure portal](https://portal.azure.com), and select the Azure AI Studio hub.
73
73
1. Select **Networking**, then **Workspace managed outbound access**.
74
74
1. To add an outbound rule, select **Add user-defined outbound rules**. From the **Workspace outbound rules** sidebar, provide the following information:
75
75
76
-
-**Rule name**: A name for the rule. The name must be unique for the AI hub.
76
+
-**Rule name**: A name for the rule. The name must be unique for the AI Studio hub.
77
77
-**Destination type**: Private Endpoint.
78
78
-**Subscription**: The subscription that contains the Azure resource you want to connect to.
79
79
-**Resource type**: `Microsoft.Storage/storageAccounts`. This resource provider is used for Azure Storage, Azure Data Lake Storage Gen2, and Microsoft OneLake.
Copy file name to clipboardExpand all lines: articles/ai-studio/how-to/data-add.md
+16-19Lines changed: 16 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -66,18 +66,18 @@ These steps explain how to create a File typed data in Azure AI Studio:
66
66
67
67
1. Choose your **Data source**. You have three options to choose a data source.
68
68
- You can select data from **Existing Connections**.
69
-
- You can **Get data with Storage URL** if you have a direct URL to a storage account or a public accessible HTTPS server.
70
-
- You can choose**Upload files/folders** to upload a folder from your local drive.
69
+
- You can select **Get data with Storage URL** if you have a direct URL to a storage account or a public accessible HTTPS server.
70
+
- You can select**Upload files/folders** to upload a folder from your local drive.
71
71
72
72
:::image type="content" source="../media/data-add/select-connection.png" alt-text="This screenshot shows the existing connections.":::
73
73
74
-
1.**Existing Connections**: You can select an existing connection, browse into this connection, and choose a file you need. If the existing connections don't work for you, select the **New connection** button at the upper right.
74
+
-**Existing Connections**: You can select an existing connection, browse into this connection, and choose a file you need. If the existing connections don't work for you, select the **New connection** button at the upper right.
75
75
:::image type="content" source="../media/data-add/new-connection.png" alt-text="This screenshot shows the creation of a new connection to an external asset.":::
76
76
77
-
1.**Get data with Storage URL**: You can choose the **Type** as "File", and then provide a URL based on the supported URL formats listed on that page.
77
+
-**Get data with Storage URL**: You can choose the **Type** as "File", and then provide a URL based on the supported URL formats listed on that page.
78
78
:::image type="content" source="../media/data-add/file-url.png" alt-text="This screenshot shows provision of a URL that points to a file.":::
79
79
80
-
1.**Upload files/folders**: You can select **Upload files or folder**, select **Upload files**, and choose the local file to upload. The file uploads into the default "workspaceblobstore" connection.
80
+
-**Upload files/folders**: You can select **Upload files or folder**, select **Upload files**, and choose the local file to upload. The file uploads into the default "workspaceblobstore" connection.
81
81
:::image type="content" source="../media/data-add/upload.png" alt-text="This screenshot shows the step to upload files/folders.":::
82
82
83
83
1. Select **Next** after you choose the data source.
@@ -103,15 +103,15 @@ A Folder (`uri_folder`) data source type points to a *folder* on a storage resou
103
103
104
104
:::image type="content" source="../media/data-add/select-connection.png" alt-text="This screenshot shows the existing connections.":::
105
105
106
-
1.**Existing Connections**: You can select an existing connection and browse into this connection and choose a file you need. If the existing connections don't work for you, you can select the **New connection** button at the right.
106
+
-**Existing Connections**: You can select an existing connection and browse into this connection and choose a file you need. If the existing connections don't work for you, you can select the **New connection** button at the right.
107
107
108
108
:::image type="content" source="../media/data-add/choose-folder.png" alt-text="This screenshot shows the step to choose a folder from an existing connection.":::
109
109
110
-
1.**Get data with Storage URL**: You can choose the **Type** as "Folder", and provide a URL based on the supported URL formats listed on that page.
110
+
-**Get data with Storage URL**: You can choose the **Type** as "Folder", and provide a URL based on the supported URL formats listed on that page.
111
111
112
112
:::image type="content" source="../media/data-add/folder-url.png" alt-text="This screenshot shows the step to provide a URL that points to a folder.":::
113
113
114
-
1.**Upload files/folders**: You can select **Upload files or folder**, and select **Upload files**, and choose the local file to upload. The file resources upload into the default "workspaceblobstore" connection.
114
+
-**Upload files/folders**: You can select **Upload files or folder**, and select **Upload files**, and choose the local file to upload. The file resources upload into the default "workspaceblobstore" connection.
115
115
116
116
:::image type="content" source="../media/data-add/upload.png" alt-text="This screenshot shows the step to upload files/folders.":::
117
117
@@ -126,20 +126,17 @@ A Folder (`uri_folder`) data source type points to a *folder* on a storage resou
126
126
### Delete data
127
127
128
128
> [!IMPORTANT]
129
-
> ***By design*, data deletion is not supported.**
130
-
>
131
-
> If Azure AI allowed data deletion, it would have the following adverse effects:
132
-
>
133
-
> -**Production jobs** that consume data that is later deleted would fail.
134
-
> - ML experiment reproduction would become more difficult.
135
-
> - Job **lineage** would break, because it would become impossible to view the deleted data version.
136
-
> - You could no longer **track and audit** correctly, since versions could be missing.
137
-
>
138
-
> Therefore, data *immutability* provides a level of protection when working in a team that creates production workloads.
129
+
> Data deletion is not supported. Data is immutable in AI Studio. Once you create a data version, it can't be modified or deleted. This immutability provides a level of protection when working in a team that creates production workloads.
130
+
131
+
If AI Studio allowed data deletion, it would have the following adverse effects:
132
+
- Production jobs that consume data that is later deleted would fail.
133
+
- Machine learning experiment reproduction would become more difficult.
134
+
- Job lineage would break, because it would become impossible to view the deleted data version.
135
+
- You could no longer track and audit correctly, since versions could be missing.
139
136
140
137
When a data resource is erroneously created - for example, with an incorrect name, type or path - Azure AI offers solutions to handle the situation without the negative consequences of deletion:
141
138
142
-
|*I want to delete this data because...*| Solution |
139
+
|Reason that you might want to delete data | Solution |
143
140
|---------|---------|
144
141
|The **name** is incorrect |[Archive the data](#archive-data)|
145
142
|The team **no longer uses** the data |[Archive the data](#archive-data)|
Copy file name to clipboardExpand all lines: articles/ai-studio/how-to/deploy-jais-models.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,9 +28,9 @@ You can find the JAIS model in the [Model Catalog](model-catalog.md) by filterin
28
28
- An [Azure AI Studio hub](../how-to/create-azure-ai-resource.md).
29
29
30
30
> [!IMPORTANT]
31
-
> For JAIS models, the serverless API model deployment offering is only available with AI hubs created in East US 2 or Sweden Central region.
31
+
> For JAIS models, the serverless API model deployment offering is only available with hubs created in East US 2 or Sweden Central region.
32
32
33
-
- An [Azure AI project](../how-to/create-projects.md) in Azure AI Studio.
33
+
- An [AI Studio project](../how-to/create-projects.md) in Azure AI Studio.
34
34
- Azure role-based access controls (Azure RBAC) are used to grant access to operations in Azure AI Studio. To perform the steps in this article, your user account must be assigned the __Azure AI Developer role__ on the resource group. For more information on permissions, see [Role-based access control in Azure AI Studio](../concepts/rbac-ai-studio.md).
Copy file name to clipboardExpand all lines: articles/ai-studio/how-to/deploy-models-cohere-command.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -55,7 +55,7 @@ The previously mentioned Cohere models can be deployed as a service with pay-as-
55
55
> [!IMPORTANT]
56
56
> For Cohere family models, the serverless API model deployment offering is only available with hubs created in **EastUS2** or **Sweden Central** region.
57
57
58
-
- An [Azure AI project](../how-to/create-projects.md) in Azure AI Studio.
58
+
- An [AI Studio project](../how-to/create-projects.md) in Azure AI Studio.
59
59
- Azure role-based access controls (Azure RBAC) are used to grant access to operations in Azure AI Studio. To perform the steps in this article, your user account must be assigned the __Azure AI Developer role__ on the resource group. For more information on permissions, see [Role-based access control in Azure AI Studio](../concepts/rbac-ai-studio.md).
Copy file name to clipboardExpand all lines: articles/ai-studio/how-to/deploy-models-cohere-embed.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -50,12 +50,12 @@ The previously mentioned Cohere models can be deployed as a service with pay-as-
50
50
### Prerequisites
51
51
52
52
- An Azure subscription with a valid payment method. Free or trial Azure subscriptions won't work. If you don't have an Azure subscription, create a [paid Azure account](https://azure.microsoft.com/pricing/purchase-options/pay-as-you-go) to begin.
53
-
- An [Azure AI hub resource](../how-to/create-azure-ai-resource.md).
53
+
- An [AI Studio hub](../how-to/create-azure-ai-resource.md).
54
54
55
55
> [!IMPORTANT]
56
-
> For Cohere family models, the serverless API model deployment offering is only available with AI hubs created in **EastUS2** or **Sweden Central** region.
56
+
> For Cohere family models, the serverless API model deployment offering is only available with hubs created in **EastUS2** or **Sweden Central** region.
57
57
58
-
- An [Azure AI project](../how-to/create-projects.md) in Azure AI Studio.
58
+
- An [AI Studio project](../how-to/create-projects.md) in Azure AI Studio.
59
59
- Azure role-based access controls are used to grant access to operations in Azure AI Studio. To perform the steps in this article, your user account must be assigned the __Azure AI Developer role__ on the resource group. For more information on permissions, see [Role-based access control in Azure AI Studio](../concepts/rbac-ai-studio.md).
0 commit comments