Azure-docs: can't edit Notebooks by the custom role of "data_scientist_custom_role.json"
[Enter feedback here]
Notebooks cannot be edited with custom roles on the following sites.
https://docs.microsoft.com/en-gb/azure/machine-learning/how-to-assign-roles#q-are-there-some-custom-role-templates-for-the-most-common-scenarios-in-machine-learning-service
data_scientist_custom_role.json:{ "Name": "Data Scientist Custom", "IsCustom": true, "Description": "Can run experiment but can't create or delete compute or deploy production endpoints.", "Actions": [ "Microsoft.MachineLearningServices/workspaces/*/read", "Microsoft.MachineLearningServices/workspaces/*/action", "Microsoft.MachineLearningServices/workspaces/*/delete", "Microsoft.MachineLearningServices/workspaces/*/write" ], "NotActions": [ "Microsoft.MachineLearningServices/workspaces/delete", "Microsoft.MachineLearningServices/workspaces/write", "Microsoft.MachineLearningServices/workspaces/computes/*/write", "Microsoft.MachineLearningServices/workspaces/computes/*/delete", "Microsoft.Authorization/*", "Microsoft.MachineLearningServices/workspaces/computes/listKeys/action", "Microsoft.MachineLearningServices/workspaces/listKeys/action", "Microsoft.MachineLearningServices/workspaces/services/aks/write", "Microsoft.MachineLearningServices/workspaces/services/aks/delete", "Microsoft.MachineLearningServices/workspaces/endpoints/pipelines/write" ], "AssignableScopes": [ "/subscriptions/<subscription_id>" ] }
It needs to remove the following Action from "NotActions".
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
Document details
⚠Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.
- ID: 0ca3ea12-4f8c-72e4-4703-ea2ef9dcee0f
- Version Independent ID: a4b7c496-22f9-0fd6-cd7d-0fd613f1a1ec
- Content: Manage roles in your workspace - Azure Machine Learning
- Content Source: articles/machine-learning/how-to-assign-roles.md
- Service: machine-learning
- Sub-service: core
- GitHub Login: @nishankgu
- Microsoft Alias: nigup
damochiz
All 3 comments
@John WuWu.John@microsoft.com @Abe OmorogbeOsarumwense.Omorogbe@microsoft.com @Vijeta JohriVijeta.Johri@microsoft.com on this.
Haven’t checked the GH link but the custom roles shouldn’t prevent notebook authoring. If it’s about editing the CI, that’s on purpose!
From: damochiz notifications@github.com
Sent: Wednesday, September 30, 2020 6:37:47 AM
To: MicrosoftDocs/azure-docs azure-docs@noreply.github.com
Cc: Nishank Gupta Nishank.Gupta@microsoft.com; Mention mention@noreply.github.com
Subject: [MicrosoftDocs/azure-docs] can't edit Notebooks by the custom role of "data_scientist_custom_role.json" (#63544)
[Enter feedback here]
Notebooks cannot be edited with custom roles on the following sites.
https://docs.microsoft.com/en-gb/azure/machine-learning/how-to-assign-roles#q-are-there-some-custom-role-templates-for-the-most-common-scenarios-in-machine-learning-servicehttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Fmachine-learning%2Fhow-to-assign-roles%23q-are-there-some-custom-role-templates-for-the-most-common-scenarios-in-machine-learning-service&data=02%7C01%7CNishank.Gupta%40microsoft.com%7Cbca2d84302564ec2cf6f08d8654604dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370698719516360&sdata=g7Ws%2BDmA72R3bleJsaXTwjSDSxlnTqTIRuE%2FCJVVksU%3D&reserved=0
data_scientist_custom_role.json :
{
"Name": "Data Scientist Custom",
"IsCustom": true,
"Description": "Can run experiment but can't create or delete compute or deploy production endpoints.",
"Actions": [
"Microsoft.MachineLearningServices/workspaces/*/read",
"Microsoft.MachineLearningServices/workspaces/*/action",
"Microsoft.MachineLearningServices/workspaces/*/delete",
"Microsoft.MachineLearningServices/workspaces/*/write"
],
"NotActions": [
"Microsoft.MachineLearningServices/workspaces/delete",
"Microsoft.MachineLearningServices/workspaces/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/delete",
"Microsoft.Authorization/*",
"Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/services/aks/write",
"Microsoft.MachineLearningServices/workspaces/services/aks/delete",
"Microsoft.MachineLearningServices/workspaces/endpoints/pipelines/write"
],
"AssignableScopes": [
"/subscriptions/<subscription_id>"
]
}
It needs to remove the following Action from "NotActions".
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
Document details
⚠Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.
- ID: 0ca3ea12-4f8c-72e4-4703-ea2ef9dcee0f
- Version Independent ID: a4b7c496-22f9-0fd6-cd7d-0fd613f1a1ec
- Content: Manage roles in your workspace - Azure Machine Learninghttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Fmachine-learning%2Fhow-to-assign-roles%23q-are-there-some-custom-role-templates-for-the-most-common-scenarios-in-machine-learning-service&data=02%7C01%7CNishank.Gupta%40microsoft.com%7Cbca2d84302564ec2cf6f08d8654604dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370698719516360&sdata=g7Ws%2BDmA72R3bleJsaXTwjSDSxlnTqTIRuE%2FCJVVksU%3D&reserved=0
- Content Source: articles/machine-learning/how-to-assign-roles.mdhttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fblob%2Fmaster%2Farticles%2Fmachine-learning%2Fhow-to-assign-roles.md&data=02%7C01%7CNishank.Gupta%40microsoft.com%7Cbca2d84302564ec2cf6f08d8654604dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370698719526355&sdata=tIsHXfSwIT3lctxVwQ5IqhNIQhTISJPg%2BMcXWIVdh6s%3D&reserved=0
- Service: machine-learning
- Sub-service: core
- GitHub Login: @nishankguhttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnishankgu&data=02%7C01%7CNishank.Gupta%40microsoft.com%7Cbca2d84302564ec2cf6f08d8654604dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370698719526355&sdata=tkZSSArXsK%2B8BC0yOVh03OkT5Vd%2FXPzPfMJdjplZN%2FU%3D&reserved=0
- Microsoft Alias: nigup
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F63544&data=02%7C01%7CNishank.Gupta%40microsoft.com%7Cbca2d84302564ec2cf6f08d8654604dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370698719536348&sdata=CUs5g%2FQKqGkblztNBRmC8%2BcKjDGXRjvlaWSXr4DxQ8g%3D&reserved=0, or unsubscribehttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAEBZDPXKMDC723C72QFQA7LSIMYCXANCNFSM4R7DLRYQ&data=02%7C01%7CNishank.Gupta%40microsoft.com%7Cbca2d84302564ec2cf6f08d8654604dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370698719536348&sdata=mpPvexvdnVQ68%2F1ceSg2RJX3FwTRA2XIyAtfI9EfePw%3D&reserved=0.
nishankgu
on 30 Sep 2020
Notebooks in the AzureML Studio NEEDS "Microsoft.MachineLearningServices/workspaces/listKeys/action" for the notebooks to work. That’s the current restriction today. We are working with Muzhi to fix this. (https://msdata.visualstudio.com/Vienna/_workitems/edit/894942)
From: Nishank Gupta Nishank.Gupta@microsoft.com
Sent: Wednesday, September 30, 2020 6:51 AM
To: MicrosoftDocs/azure-docs reply@reply.github.com; MicrosoftDocs/azure-docs azure-docs@noreply.github.com; Abe Omorogbe Osarumwense.Omorogbe@microsoft.com; John Wu Wu.John@microsoft.com; Vijeta Johri Vijeta.Johri@microsoft.com
Cc: Mention mention@noreply.github.com
Subject: Re: [MicrosoftDocs/azure-docs] can't edit Notebooks by the custom role of "data_scientist_custom_role.json" (#63544)
@John WuWu.John@microsoft.com @Abe OmorogbeOsarumwense.Omorogbe@microsoft.com @Vijeta JohriVijeta.Johri@microsoft.com on this.
Haven’t checked the GH link but the custom roles shouldn’t prevent notebook authoring. If it’s about editing the CI, that’s on purpose!
From: damochiz <[email protected]notifications@github.com>
Sent: Wednesday, September 30, 2020 6:37:47 AM
To: MicrosoftDocs/azure-docs <[email protected]azure-docs@noreply.github.com>
Cc: Nishank Gupta
Subject: [MicrosoftDocs/azure-docs] can't edit Notebooks by the custom role of "data_scientist_custom_role.json" (#63544)
[Enter feedback here]
Notebooks cannot be edited with custom roles on the following sites.
https://docs.microsoft.com/en-gb/azure/machine-learning/how-to-assign-roles#q-are-there-some-custom-role-templates-for-the-most-common-scenarios-in-machine-learning-servicehttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Fmachine-learning%2Fhow-to-assign-roles%23q-are-there-some-custom-role-templates-for-the-most-common-scenarios-in-machine-learning-service&data=02%7C01%7COsarumwense.Omorogbe%40microsoft.com%7C11c1c13b214c42cd0f9c08d86547e6f9%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370706782901345&sdata=OgNriXnjdmn3yUIMDIYWr%2F0ol9UeOQRTqUggFqMzSuM%3D&reserved=0
data_scientist_custom_role.json :
{
"Name": "Data Scientist Custom",
"IsCustom": true,
"Description": "Can run experiment but can't create or delete compute or deploy production endpoints.",
"Actions": [
"Microsoft.MachineLearningServices/workspaces/*/read",
"Microsoft.MachineLearningServices/workspaces/*/action",
"Microsoft.MachineLearningServices/workspaces/*/delete",
"Microsoft.MachineLearningServices/workspaces/*/write"
],
"NotActions": [
"Microsoft.MachineLearningServices/workspaces/delete",
"Microsoft.MachineLearningServices/workspaces/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/delete",
"Microsoft.Authorization/*",
"Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/services/aks/write",
"Microsoft.MachineLearningServices/workspaces/services/aks/delete",
"Microsoft.MachineLearningServices/workspaces/endpoints/pipelines/write"
],
"AssignableScopes": [
"/subscriptions/<subscription_id>"
]
}
It needs to remove the following Action from "NotActions".
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
Document details
⚠Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.
- ID: 0ca3ea12-4f8c-72e4-4703-ea2ef9dcee0f
- Version Independent ID: a4b7c496-22f9-0fd6-cd7d-0fd613f1a1ec
- Content: Manage roles in your workspace - Azure Machine Learninghttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Fmachine-learning%2Fhow-to-assign-roles%23q-are-there-some-custom-role-templates-for-the-most-common-scenarios-in-machine-learning-service&data=02%7C01%7COsarumwense.Omorogbe%40microsoft.com%7C11c1c13b214c42cd0f9c08d86547e6f9%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370706782906318&sdata=j7ayiELtAJr59nsMC3X6THNuaazXjvnzWG7kq7R71tI%3D&reserved=0
- Content Source: articles/machine-learning/how-to-assign-roles.mdhttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fblob%2Fmaster%2Farticles%2Fmachine-learning%2Fhow-to-assign-roles.md&data=02%7C01%7COsarumwense.Omorogbe%40microsoft.com%7C11c1c13b214c42cd0f9c08d86547e6f9%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370706782911294&sdata=2yHgAakpMwni%2F5M6%2FZoZtPR6OftmkKPTflp%2BCzWhsk8%3D&reserved=0
- Service: machine-learning
- Sub-service: core
- GitHub Login: @nishankguhttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnishankgu&data=02%7C01%7COsarumwense.Omorogbe%40microsoft.com%7C11c1c13b214c42cd0f9c08d86547e6f9%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370706782916274&sdata=y0JQtGlbWRbGWYWtCLcSKa9egT8qicVCK9l9YWaNpDU%3D&reserved=0
- Microsoft Alias: nigup
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F63544&data=02%7C01%7COsarumwense.Omorogbe%40microsoft.com%7C11c1c13b214c42cd0f9c08d86547e6f9%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370706782921259&sdata=BNkXntEEcR8EyCsApHaHssumsIOTRR09Dj1Cisvxhh4%3D&reserved=0, or unsubscribehttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAEBZDPXKMDC723C72QFQA7LSIMYCXANCNFSM4R7DLRYQ&data=02%7C01%7COsarumwense.Omorogbe%40microsoft.com%7C11c1c13b214c42cd0f9c08d86547e6f9%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637370706782926229&sdata=ux%2Fc0wzYfih6FX4XoM%2Bzg0SbkOkCbzHviAiXvrgJGUQ%3D&reserved=0.
nishankgu
on 30 Sep 2020
@damochiz, thanks for your report and thank you@nishankgu for responding to the issue.
I'll proceed to #please-close this issue.
PeterCLu
on 30 Sep 2020
Related issues
Favna
·
3Comments
jamesgallagher-ie
·
3Comments
ianpowell2017
·
3Comments
spottedmahn
·
3Comments
behnam89
·
3Comments