|
1 | 1 | ---
|
2 |
| -title: Understanding the Azure Storage Discovery management components |
3 |
| -description: Understanding the Azure Storage Discovery management components |
| 2 | +title: Planning for Storage Discovery deployment | Microsoft Docs |
| 3 | +titleSuffix: Azure Storage Discovery |
| 4 | +description: Storage Discovery provides insights on storage capacity, transactions, and configurations - providing visibility into your storage estate at entire organization level and aiding business decisions. |
4 | 5 | author: fauhse
|
5 |
| -ms.author: fauhse |
6 | 6 | ms.service: azure-storage-discovery
|
7 |
| -ms.topic: conceptual |
| 7 | +ms.topic: overview |
8 | 8 | ms.date: 08/01/2025
|
| 9 | +ms.author: fauhse |
| 10 | +ms.custom: references_regions |
9 | 11 | ---
|
10 | 12 |
|
11 |
| -# Understanding the Azure Storage Discovery management components |
| 13 | +# Azure Storage Discovery concepts |
12 | 14 |
|
13 |
| -Several Azure resources are involved in a Storage Discovery deployment. This article describes each of these resources, their uses, and best practices for expressing your migration needs with them. |
| 15 | +The concepts and terminology used throughout this documentation are defined below. |
14 | 16 |
|
15 |
| -:::image type="content" source="media/management-components/discovery-components.png" alt-text="An image showing the Storage Discovery management resources further described in this article." lightbox="media/management-components/discovery-components.png"::: |
| 17 | +## Key concepts |
16 | 18 |
|
17 |
| -## Workspace |
| 19 | +### Azure Storage Discovery workspace |
| 20 | +The Azure Storage Discovery workspace (ASDW) is the resource used to deploy and manage Storage Discovery in your subscription. It defines the scope of analysis - such as subscriptions or resource groups and once created, it enables visibility into capacity, transactions, and configuration trends across storage accounts within the selected "scope". |
18 | 21 |
|
19 |
| -A storage discovery workspace is the name of the top-level service resource that you deploy in a resource group of your choice. All aspects of the service are controlled from this resource. In most cases, deploying a single storage discovery workspace is sufficient for even the largest cloud estate. |
| 22 | +### Workspace Root |
| 23 | +Azure Resource Manager (ARM) resource identifiers that define the root-level boundaries of an Azure Storage Discovery Workspace (ASDW). These roots specify the top-level Azure resources - such as subscriptions and/or resource groups - over which the discovery workspace will operate. |
20 | 24 |
|
21 |
| -You're better able to manage your data if all resources find their home in the same storage discovery workspace. |
| 25 | +Example: |
22 | 26 |
|
23 |
| -When you deploy the workspace, your subscription is registered with the *Microsoft.StorageDiscovery* resource provider. You also assign the region in which control messages and metadata about your cloud estate is stored. The Storage Discovery workspace itself isn't directly responsible for aggregating your storage insights. Instead, the dingsbum sends them directly to the reporting interface Azure Storage. Because the dingsbum performs most the work, the proximity between storage account and the dingsbum is more important for performance than your storage discovery workspace's location. |
| 27 | +```json |
| 28 | +"workspaceRoots": [ |
| 29 | + "/subscriptions/ffff5f5f-aa6a-bb7b-cc8c-dddddd9d9d9d", |
| 30 | + "/subscriptions/ffff5f5f-aa6a-bb7b-cc8c-dddddd9d9d9d/resourceGroups/myResourceGroup" |
| 31 | +] |
| 32 | +``` |
24 | 33 |
|
25 |
| -:::image type="content" source="media/management-components/discovery-components.png" alt-text="An image showing the Storage Discovery Azure resources further described in this article." lightbox="media/management-components/discovery-components.png"::: |
| 34 | +This configuration means the workspace will monitor storage accounts under the specified subscription and resource group. |
26 | 35 |
|
27 |
| -## Root |
| 36 | +> [!NOTE] |
| 37 | +> - Users need Reader access on subscriptions or resource groups to add them to workspace roots during Discovery workspace deployment. |
28 | 38 |
|
29 |
| -The workspace root consists of Azure Resource Manager (ARM) resource identifiers that define the root-level boundaries of an Azure Storage Discovery Workspace (ASDW). These roots specify the top-level Azure resources, such as subscriptions and/or resource groups - over which the discovery workspace will operate. |
30 | 39 |
|
31 |
| -> [!TIP] |
32 |
| -> The proximity and network quality between your subscriptions and resource groups in Azure determine aggregation velocity in early stages of your discovery. The region of the storage discovery workspace you've deployed doesn't play a role for performance. |
| 40 | +### Scope |
| 41 | +A Scope in Azure Storage Discovery represents a logical grouping of storage accounts based on user-defined criteria, such as resource tags. Scopes are configured within the boundaries of a workspace and serve as filters to organize and segment data for reporting and insights. By defining scopes, users can tailor their workspace to align with specific business units, workloads, or any segment of their Azure Storage environment they wish to monitor. This enables more targeted visibility and actionable insights across distinct areas of the storage estate. Users have flexibility to define: |
33 | 42 |
|
34 |
| -## Scope |
| 43 | +- A scope without any ARM tags will include all storage accounts within the defined scope |
| 44 | +- A scope with tags enables users to selectively choose specific storage accounts based on Azure tags assigned to the storage accounts. |
35 | 45 |
|
36 |
| -A Scope represents a logical grouping of storage accounts in Azure based on user-defined criteria, such as resource tags. Scopes are configured within the boundaries of a workspace and serve as filters to organize and segment data for reporting and insights. By defining scopes, users can tailor their workspace to align with specific business units, workloads, or any segment of their Azure Storage environment they wish to monitor. This enables more targeted visibility and actionable insights across distinct areas of the storage estate. |
| 46 | +Deploying Azure Storage Discovery workspace in one of your Azure subscriptions is the first step in starting aggregation of storage account metrics. |
37 | 47 |
|
| 48 | +## Select a subscription and region for Azure Storage Discovery workspace deployment |
38 | 49 |
|
39 |
| -Users have flexibility to define: |
| 50 | +Azure Storage Discovery workspace can be deployed in a subscription of your choice and in one of the supported regions. |
| 51 | +[!INCLUDE [control-plane-regions](includes/control-plane-regions.md)] |
40 | 52 |
|
41 |
| -- A scope without any ARM tags will include all storage accounts within the defined scope. |
42 |
| -- A scope with specific ARM tags will only include storage accounts that match those tags. |
43 |
| -- A scope with a combination of ARM tags and resource groups will include storage accounts that match the tags within the specified resource groups. |
44 |
| -- A scope with a combination of ARM tags and subscriptions will include storage accounts that match the tags within the specified subscriptions. |
45 |
| -- A scope with a combination of ARM tags, resource groups, and subscriptions will include storage accounts that match the tags within the specified resource groups and subscriptions. |
46 |
| -- A scope with a combination of ARM tags, resource groups, subscriptions, and regions will include storage accounts that match the tags within the specified resource groups, subscriptions, and regions. |
47 |
| -- A scope with a combination of ARM tags, resource groups, subscriptions, regions, and storage account types will include storage accounts that match the tags within the specified resource groups, subscriptions, regions, and storage account types. |
48 |
| -- A scope with a combination of ARM tags, resource groups, subscriptions, regions, storage account types, and storage account names will include storage accounts that match the tags within the specified resource groups, subscriptions, regions, storage account types, and storage account names. |
49 |
| -- A scope with a combination of ARM tags, resource groups, subscriptions, regions, storage account types, storage account names, and storage account locations will include storage accounts that match the tags within the specified resource groups, subscriptions, regions, storage account types, storage account names, and storage account locations. |
50 |
| -- A scope with a combination of ARM tags, resource groups, subscriptions, regions, storage account types, storage account names, storage account locations, and storage account access tiers will include storage accounts that match the tags within the specified resource groups, subscriptions, regions, storage account types, storage account names, storage account locations, and storage account access tiers. |
51 |
| -- A scope with a combination of ARM tags, resource groups, subscriptions, regions, storage account types, storage account names, storage account locations, storage account access tiers, and storage account replication types will include storage accounts that match the tags within the specified resource groups, subscriptions, regions, storage account types, storage account names, storage account locations, storage account access tiers, and storage account replication types. |
| 53 | +Once a discovery workspace is created in a specific region, it can aggregate metrics from storage accounts located across a broader set of supported regions, irrespective of the region in which the discovery workspace itself resides. |
| 54 | +[!INCLUDE [data-plane-regions](includes/data-plane-regions.md)] |
52 | 55 |
|
| 56 | +## Permissions |
53 | 57 |
|
54 |
| -Grouping sources into a scope doesn't mean you have to analyze all of them in parallel. You have control over what to aggregate and when to aggregate it. The remaining sections in this article describe more resources that allow for such fine-grained control. |
| 58 | +To deploy a Discovery Workspace, user must have following access: |
55 | 59 |
|
56 |
| -> [!TIP] |
57 |
| -> You can optionally add a description to your workspace. A description can help to keep track of additional information for your workspace. |
| 60 | +| Scenario | Minimal RBAC role assignments needed | |
| 61 | +|---|---| |
| 62 | +| To deploy Discovery workspace | Contributor access on the subscription or the resource group| |
| 63 | +| To include the subscription or resource groups in a Discovery workspace as part of *workspaceRoots* | Microsoft.Storage/storageAccounts/read access on the subscription or resource group | |
| 64 | +| To view Discovery reports | Reader access on the Discovery workspace | |
58 | 65 |
|
59 |
| -## Next steps |
| 66 | +## Azure Storage Discovery pricing plans |
60 | 67 |
|
61 |
| -After understanding the resources involved in an Azure Storage Mover deployment, it's a good idea to start a proof-of-concept deployment. These articles are good, next reads: |
| 68 | +Storage Discovery is available in two different SKUs or pricing plans. |
62 | 69 |
|
63 |
| -- [Plan your Storage Discovery deployment.](deployment-planning.md) |
64 |
| -- [Deploy a storage discovery workspace in your subscription.](create-workspace.md) |
| 70 | +[!INCLUDE [pricing-plan-differentiation](includes/pricing-plan-differentiation.md)] |
0 commit comments