Skip to content

Commit 30f30d4

Browse files
authored
Merge pull request #205534 from Blackmist/identity-warning
adding warning per ask from PG
2 parents 6969cd2 + fb8d649 commit 30f30d4

File tree

2 files changed

+16
-2
lines changed

2 files changed

+16
-2
lines changed

articles/machine-learning/how-to-identity-based-data-access.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -192,12 +192,19 @@ This authentication mode allows you to:
192192
* Set up fine-grained permissions, where different workspace users can have access to different storage accounts or folders within storage accounts.
193193
* Audit storage access because the storage logs show which identities were used to access data.
194194

195-
> [!WARNING]
195+
> [!IMPORTANT]
196196
> This functionality has the following limitations
197197
> * Feature is only supported for experiments submitted via the [Azure Machine Learning CLI](how-to-configure-cli.md)
198198
> * Only CommandJobs, and PipelineJobs with CommandSteps and AutoMLSteps are supported
199199
> * User identity and compute managed identity cannot be used for authentication within same job.
200200
201+
> [!WARNING]
202+
> This feature is __public preview__ and is __not secure for production workloads__. Ensure that only trusted users have permissions to access your workspace and storage accounts.
203+
>
204+
> Preview features are provided without a service-level agreement, and are not recommended for production workloads. Certain features might not be supported or might have constrained capabilities.
205+
>
206+
> For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
207+
201208
The following steps outline how to set up identity-based data access for training jobs on compute clusters.
202209

203210
1. Grant the user identity access to storage resources. For example, grant StorageBlobReader access to the specific storage account you want to use or grant ACL-based permission to specific folders or files in Azure Data Lake Gen 2 storage.

articles/machine-learning/v1/how-to-identity-based-data-access.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -211,12 +211,19 @@ This authentication mode allows you to:
211211
* Set up fine-grained permissions, where different workspace users can have access to different storage accounts or folders within storage accounts.
212212
* Audit storage access because the storage logs show which identities were used to access data.
213213

214-
> [!WARNING]
214+
> [!IMPORTANT]
215215
> This functionality has the following limitations
216216
> * Feature is only supported for experiments submitted via the [Azure Machine Learning CLI](../how-to-configure-cli.md)
217217
> * Only CommandJobs, and PipelineJobs with CommandSteps and AutoMLSteps are supported
218218
> * User identity and compute managed identity cannot be used for authentication within same job.
219219
220+
> [!WARNING]
221+
> This feature is __public preview__ and is __not secure for production workloads__. Ensure that only trusted users have permissions to access your workspace and storage accounts.
222+
>
223+
> Preview features are provided without a service-level agreement, and are not recommended for production workloads. Certain features might not be supported or might have constrained capabilities.
224+
>
225+
> For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
226+
220227
The following steps outline how to set up identity-based data access for training jobs on compute clusters.
221228

222229
1. Grant the user identity access to storage resources. For example, grant StorageBlobReader access to the specific storage account you want to use or grant ACL-based permission to specific folders or files in Azure Data Lake Gen 2 storage.

0 commit comments

Comments
 (0)