You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/machine-learning/concept-soft-delete.md
+19-10Lines changed: 19 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,20 +9,26 @@ ms.custom:
9
9
ms.topic: conceptual
10
10
ms.author: deeikele
11
11
author: deeikele
12
-
ms.date: 10/31/2022
12
+
ms.reviewer: larryfr
13
+
ms.date: 11/07/2022
13
14
#Customer intent: As an IT pro, understand how to enable data protection capabilities, to protect against accidental deletion.
14
15
---
15
16
16
17
# Recover workspace data after accidental deletion with soft delete (Preview)
17
18
18
19
The soft-delete feature for Azure Machine Learning workspace provides a data protection capability that enables you to attempt recovery of workspace data after accidental deletion. Soft delete introduces a two-step approach in deleting a workspace. When a workspace is deleted, it's first soft deleted. While in soft-deleted state, you can choose to recover or permanently delete a workspace and its data during a data retention period.
19
20
21
+
> [!IMPORTANT]
22
+
> Workspace soft delete is currently in public preview. This preview is provided without a service level agreement, and it's not recommended for production workloads. Certain features might not be supported or might have constrained capabilities.
23
+
> For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
24
+
> To enroll your Azure Subscription, see [Register soft-delete on an Azure subscription](#register-soft-delete-on-an-azure-subscription).
25
+
20
26
## How workspace soft delete works
21
27
22
28
When a workspace is soft-deleted, data and metadata stored service-side get soft-deleted, but some configurations get hard-deleted. Below table provides an overview of which configurations and objects get soft-deleted, and which are hard-deleted.
23
29
24
30
> [!IMPORTANT]
25
-
> Workspaces encrypted with customer-managed keys (CMK) are not enabled for soft delete and are always hard deleted.
31
+
> Soft delete is not supported for workspaces encrypted with customer-managed keys (CMK), and these workspaces are always hard deleted.
26
32
27
33
Data / configuration | Soft-deleted | Hard-deleted
28
34
---|---|---
@@ -60,11 +66,11 @@ During the retention period, soft-deleted workspaces can be recovered or permane
60
66
61
67
## Deleting a workspace
62
68
63
-
The default deletion behavior when deleting a workspace is soft delete. This excludes workspaces that are [encrypted with a customer-managed key](concept-customer-managed-keys.md), which aren't supported for soft delete.
69
+
The default deletion behavior when deleting a workspace is soft delete. This behavior excludes workspaces that are [encrypted with a customer-managed key](concept-customer-managed-keys.md), which aren't supported for soft delete.
64
70
65
71
Optionally, you may permanently delete a workspace going to soft delete state first by checking __Delete the workspace permanently__ in the Azure portal. Permanently deleting workspaces can only be done one workspace at time, and not using a batch operation.
66
72
67
-
Permanently deleting a workspace allows a workspace name to be reused immediately after deletion. This may be useful in dev/test scenarios where you want to create and later delete a workspace. Permanently deleting a workspace may also be required for compliance if you manage highly sensitive data. See [General Data Protection Regulation (GDPR) implications](#general-data-protection-regulation-gdpr-implications) to learn more on how deletions are handled when soft delete is enabled.
73
+
Permanently deleting a workspace allows a workspace name to be reused immediately after deletion. This behavior may be useful in dev/test scenarios where you want to create and later delete a workspace. Permanently deleting a workspace may also be required for compliance if you manage highly sensitive data. See [General Data Protection Regulation (GDPR) implications](#general-data-protection-regulation-gdpr-implications) to learn more on how deletions are handled when soft delete is enabled.
68
74
69
75
> [!TIP]
70
76
> SDK/CLI options for deleting dependent resources are only possible in combination with permanently deleting a workspace, and fails in case a workspace is not permanently deleted to allow for best changes of recovering workspace data.
@@ -86,21 +92,25 @@ Soft-deleted workspaces can be managed under the Azure Machine Learning resource
86
92
87
93
## Recover a soft-deleted workspace
88
94
89
-
Calling *Recover* on a soft-deleted workspace, will initiate an operation to restore the workspace state. The service attempts recreation or reattachment of a subset of resources, including role assignments. Hard-deleted resources including compute clusters should be recreated by you.
95
+
When you select *Recover* on a soft-deleted workspace, it initiates an operation to restore the workspace state. The service attempts recreation or reattachment of a subset of resources, including Azure RBAC role assignments. Hard-deleted resources including compute clusters should be recreated by you.
96
+
97
+
Azure Machine Learning recovers Azure RBAC role assignments for the workspace identity, but doesn't recover role assignments you may have added for users or user groups. It may take up to 15 minutes for role assignments to propagate after workspace recovery.
90
98
91
-
Recovery of a workspace may not always be possible. Azure Machine Learning stores workspace metadata on [other Azure resources associated with the workspace](concept-workspace.md#associated-resources). In the event these dependent Azure resources were also deleted, this may prevent the workspace from being recovered or correctly restored. Restore dependent Azure resource first, before recovering a deleted workspace.
99
+
Recovery of a workspace may not always be possible. Azure Machine Learning stores workspace metadata on [other Azure resources associated with the workspace](concept-workspace.md#associated-resources). In the event these dependent Azure resources were deleted, it may prevent the workspace from being recovered or correctly restored. Dependencies of the Azure Machine Learning workspace must be recovered first, before recovering a deleted workspace. Azure Container Registry isn't a hard requirement required for recovery.
92
100
93
101
Enable [data protection capabilities on Azure Storage](/azure/storage/blobs/soft-delete-blob-overview) to improve chances of successful recovery.
94
102
95
103
## Permanently delete a soft-deleted workspace
96
104
97
-
Calling *Permanently delete* on a soft-deleted workspace, will trigger hard deletion of workspace data. Once deleted, workspace data can no longer be recovered. Permanent deletion of workspace data is also triggered when the soft delete retention period expires.
105
+
When you select *Permanently delete* on a soft-deleted workspace, it triggers hard deletion of workspace data. Once deleted, workspace data can no longer be recovered. Permanent deletion of workspace data is also triggered when the soft delete retention period expires.
98
106
99
-
## Enroll soft-delete on an Azure subscription
107
+
## Register soft-delete on an Azure subscription
100
108
101
109
During the time of preview, workspace soft delete is enabled on an opt-in basis per Azure subscription. When soft delete is enabled for a subscription, it's enabled for all Azure Machine Learning workspaces in that subscription.
102
110
103
-
To enable workspace soft delete on your Azure subscription, [register the preview feature](/azure/azure-resource-manager/management/preview-features?tabs=azure-portal#register-preview-feature) in the Azure portal. Select `Recover workspace data after accidental deletion with soft delete` under the `Microsoft.MachineLearningServices` resource provider.
111
+
To enable workspace soft delete on your Azure subscription, [register the preview feature](/azure/azure-resource-manager/management/preview-features?tabs=azure-portal#register-preview-feature) in the Azure portal. Select `Workspace soft delete` under the `Microsoft.MachineLearningServices` resource provider. It may take 15 minutes for the UX to appear in the Azure portal after registering your subscription.
112
+
113
+
Before disabling workspace soft delete on an Azure subscription, purge or recover soft-deleted workspaces. After you disable soft delete on a subscription, workspaces that remain in soft deleted state are automatically purged when the retention period elapses.
104
114
105
115
## Billing implications
106
116
@@ -118,4 +128,3 @@ For more information, see the [Export or delete workspace data](how-to-export-de
118
128
119
129
+[Create and manage a workspace](how-to-manage-workspace.md)
120
130
+[Export or delete workspace data](how-to-export-delete-data.md)
0 commit comments