Skip to content

Commit 00631bb

Browse files
committed
Addressed reviewer feedback
1 parent eb95376 commit 00631bb

File tree

6 files changed

+8
-10
lines changed

6 files changed

+8
-10
lines changed

learn-pr/advocates/intro-azure-machine-learning-auth/1-introduction.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ uid: learn.introduction-azure-machine-learning-auth.introduction
33
title: Introduction
44
metadata:
55
title: Introduction
6-
description: Introduction to Azure machine learning authentication and authorization.
6+
description: Introduction to Azure Machine Learning authentication and authorization.
77
ms.date: 03/06/2025
88
author: Orin-Thomas
99
ms.author: viniap

learn-pr/advocates/intro-azure-machine-learning-auth/includes/1-introduction.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ Azure Machine Learning (ML) is a cloud service for managing machine learning pro
22

33
An Azure Machine Learning workspace is a centralized environment for managing machine learning projects, allowing collaboration and organization of experiments, datasets, models, and deployments. The workspace provides tools for creating, training, and deploying models, along with managing compute resources and data assets. As a cloud operations professional, you need to manage Azure Machine Learning workspace authentication and authorization.
44

5-
# Learning objectives #
5+
## Learning objectives ##
66

77
After completing this module, you'll be able to:
88

learn-pr/advocates/intro-azure-machine-learning-auth/includes/3-manage-access-azure-machine-learning.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ Azure role-based access control (Azure RBAC) is used to scope the level of acces
22

33
Azure Machine Learning applies the same principle for authorization as other Azure resources. You use Azure role-based access control (Azure RBAC) to manage access giving users the ability to create new resources or use existing ones. Users in your Microsoft Entra ID are assigned specific roles, which grant access to resources. Azure provides both built-in roles and the ability to create custom roles for Azure Machine Learning.
44

5-
Default Roles
5+
## Default Roles ##
66

77
The roles related to Azure Machine Learning workspaces are as follows.
88

learn-pr/advocates/intro-azure-machine-learning-auth/includes/4-authentication-between-azure-machine-learning-other-azure-services.md

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,20 +14,18 @@ Just like when users access the Azure Machine Learning workspace, Azure services
1414

1515
Once a workspace is created with SAI identity type, it can be updated to SAI+UAI, but not back from SAI+UAI to SAI. You may assign multiple user-assigned identities to the same workspace, or even assign additional user-assigned identities in addition to a system-assigned identity.
1616

17-
**System-assigned versus User-assigned identities**
17+
### System-assigned versus User-assigned identities ###
1818

1919
Choosing between system-assigned and user-assigned identities depends on your specific needs and how your company manages Azure resources:
2020

2121
**System-assigned identities** are created and managed by Azure for a specific resource. When a resource is deleted, its associated system-assigned identity is also deleted, ensuring that the identity lifecycle is tightly coupled with the resource it belongs to. This type of identity is ideal for scenarios where the identity only needs to be used by a single resource, providing simplicity and reducing the administrative overhead since Azure manages the identity's credentials.
2222

2323
**User-assigned identities** are created independently of any specific resource and can be shared across multiple resources. This makes them highly versatile for applications that require a consistent identity across different resources, enabling easier management of permissions and access controls. User-assigned identities persist even after the resources using them are deleted, allowing for greater flexibility in redeploying and reusing identities.
2424

25-
**User-assigned managed identity specific configuration**
25+
### User-assigned managed identity specific configuration ###
2626

2727
When you create an Azure Machine Learning workspace with the default settings (Azure Storage, Azure Container Registry, and Azure Key Vault are created for you), the system-assigned managed identity is configured with appropriate permissions. If instead you change to a user-assigned identity (or if you use existing resources for Storage, Key Vault, etc.) you need to set up the following access to that account:
2828

29-
Expand table
30-
3129
| **Resource** | **Permission** |
3230
|---|---|
3331
| **Azure Machine Learning workspace** | Contributor |
@@ -56,7 +54,7 @@ To assign the Azure Machine Learning workspace permissions to an Azure resource,
5654

5755
1. Click Review + assign twice to confirm the assignment.
5856

59-
Compute-related identities
57+
### Compute-related identities ###
6058

6159
Compute-related identities are used in the following scenarios:
6260

@@ -65,7 +63,7 @@ Compute-related identities are used in the following scenarios:
6563

6664
In both cases, the default managed identity is the system-assigned managed identity or the first user-assigned managed identity for that resource. Also, both Azure Machine Learning compute clusters and Kubernetes cluster support only one system-assigned identity or multiple user-assigned identities, not both concurrently. Finally, the scenarios in this unit don't consider if you apply an identity to access resources from within the code for a submitted job. In that case, the identity from within the code is used for access.
6765

68-
Data Storage
66+
### Data Storage ###
6967

7068
When you create a datastore that uses identity-based data access, your Azure account is used to confirm you have permission to access the storage service. In the identity-based data access scenario, no authentication credentials are saved. Only the storage account information is stored in the datastore.
7169

learn-pr/advocates/intro-azure-machine-learning-auth/includes/6-summary.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
This module provides an overview of authentication and authorization for Azure Machine Learning. You learned that Microsoft Entra ID is used for most scenarios, how to provide access to workspaces to users, and how to plan for authentication between Azure Machine Learning and other Azure resources.
22

3-
# Further reading/learning #
3+
## Further reading/learning ##
44

55
- [Set up authentication for Azure Machine Learning resources and workflows](/azure/machine-learning/how-to-setup-authentication)
66
- [Manage access to Azure Machine Learning workspaces](/azure/machine-learning/how-to-assign-roles)
-3.76 KB
Loading

0 commit comments

Comments
 (0)