Skip to content

Commit 85eea07

Browse files
authored
Merge pull request #280161 from vijetajo/patch-142
Update how-to-create-compute-instance.md
2 parents 83561fd + 43290fe commit 85eea07

File tree

3 files changed

+5
-1
lines changed

3 files changed

+5
-1
lines changed

articles/machine-learning/how-to-create-compute-instance.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -430,6 +430,8 @@ As an administrator, you can create a compute instance on behalf of a data scien
430430

431431
To further enhance security, when you create a compute instance on behalf of a data scientist and assign the instance to them, single sign-on (SSO) will be disabled during creation.
432432

433+
:::image type="content" source="media/how-to-create-compute-instance/pobo-creation.png" alt-text="Screenshot shows SSO is disabled during creation of compute instance.":::
434+
433435
The assigned to user needs to enable SSO on compute instance themselves after the compute is assigned to them by updating the SSO setting on the compute instance.
434436
Assigned to user needs to have the following permission/action in their role *MachineLearningServices/workspaces/computes/enableSso/action*.
435437

@@ -438,10 +440,12 @@ Here are the steps assigned to user needs to take. Please note creator of comput
438440
1. Click on compute in left navigation pane in Azure Machine Learning Studio.
439441
1. Click on the name of compute instance where you need to enable SSO.
440442
1. Edit the Single sign-on details section.
443+
444+
:::image type="content" source="media/how-to-create-compute-instance/pobo-sso-update.png" alt-text="Screenshot shows SSO can be updated on compute instance details page by the assigned to user.":::
445+
441446
1. Enable single sign-on toggle.
442447
1. Save. Updating will take some time.
443448

444-
445449
## Assign managed identity
446450

447451
You can assign a system- or user-assigned [managed identity](../active-directory/managed-identities-azure-resources/overview.md) to a compute instance, to authenticate against other Azure resources such as storage. Using managed identities for authentication helps improve workspace security and management. For example, you can allow users to access training data only when logged in to a compute instance. Or use a common user-assigned managed identity to permit access to a specific storage account.
45.8 KB
Loading
50.2 KB
Loading

0 commit comments

Comments
 (0)