Skip to content

Commit 83bcbff

Browse files
committed
Update how-to-assign-roles.md
Fix acrolink issues
1 parent 4da0c79 commit 83bcbff

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/machine-learning/how-to-assign-roles.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ You can use Azure AD security groups to manage access to workspaces. This approa
6464

6565
To use Azure AD security groups:
6666
1. [Create a security group](../active-directory/fundamentals/active-directory-groups-create-azure-portal.md).
67-
2. [Add a group owner](../active-directory/fundamentals/active-directory-accessmanagement-managing-group-owners.md). This user has permissions to add or remove group members. Note that the group owner is not required to be group member, or have direct RBAC role on the workspace.
67+
2. [Add a group owner](../active-directory/fundamentals/active-directory-accessmanagement-managing-group-owners.md). This user has permissions to add or remove group members. Note that the group owner isn't required to be group member, or have direct RBAC role on the workspace.
6868
3. Assign the group an RBAC role on the workspace, such as AzureML Data Scientist, Reader or Contributor.
6969
4. [Add group members](../active-directory/fundamentals/active-directory-groups-members-azure-portal.md). The members consequently gain access to the workspace.
7070

@@ -155,7 +155,7 @@ You need to have permissions on the entire scope of your new role definition. Fo
155155
156156
## Use Azure Resource Manager templates for repeatability
157157

158-
If you anticipate that you will need to recreate complex role assignments, an Azure Resource Manager template can be a big help. The [machine-learning-dependencies-role-assignment template](https://github.com/Azure/azure-quickstart-templates/tree/master//quickstarts/microsoft.machinelearningservices/machine-learning-dependencies-role-assignment) shows how role assignments can be specified in source code for reuse.
158+
If you anticipate that you'll need to recreate complex role assignments, an Azure Resource Manager template can be a significant help. The [machine-learning-dependencies-role-assignment template](https://github.com/Azure/azure-quickstart-templates/tree/master//quickstarts/microsoft.machinelearningservices/machine-learning-dependencies-role-assignment) shows how role assignments can be specified in source code for reuse.
159159

160160
## Common scenarios
161161

@@ -584,7 +584,7 @@ A vendor quality assurance role can perform a customer quality assurance role, b
584584

585585
Here are a few things to be aware of while you use Azure role-based access control (Azure RBAC):
586586

587-
- When you create a resource in Azure, such as a workspace, you are not directly the owner of the resource. Your role is inherited from the highest scope role that you are authorized against in that subscription. As an example if you are a Network Administrator, and have the permissions to create a Machine Learning workspace, you would be assigned the Network Administrator role against that workspace, and not the Owner role.
587+
- When you create a resource in Azure, such as a workspace, you're not directly the owner of the resource. Your role is inherited from the highest scope role that you're authorized against in that subscription. As an example if you're a Network Administrator, and have the permissions to create a Machine Learning workspace, you would be assigned the Network Administrator role against that workspace, and not the Owner role.
588588

589589
- To perform quota operations in a workspace, you need subscription level permissions. This means setting either subscription level quota or workspace level quota for your managed compute resources can only happen if you have write permissions at the subscription scope.
590590

0 commit comments

Comments
 (0)