Skip to content

set storage account access to identity-based for feature store creation #35941

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
qjxu merged 3 commits into from
Jun 7, 2024
Merged

set storage account access to identity-based for feature store creation #35941

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
32d3e3d
set storage account access to identity-based for feature store creation
runhli Jun 6, 2024
43b6b92
revert
runhli Jun 6, 2024
8b32c22
add workspace default storage role assignment
runhli Jun 6, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
add workspace default storage role assignment
  • Loading branch information
@runhli
runhli committed Jun 6, 2024
commit 8b32c2276b9ef89776c8a5fe378b9fba3e50ef15
32 changes: 32 additions & 0 deletions sdk/ml/azure-ai-ml/azure/ai/ml/_arm_deployments/arm_templates/workspace_base.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1047,6 +1047,38 @@
}
}
},
{
"condition": "[and(equals(parameters('kind'), 'featurestore'), equals(parameters('grant_materialization_permissions'), 'true'), not(equals(parameters('materializationIdentityOption'), 'none')))]",
"type": "Microsoft.Resources/deployments",
"name": "[concat('ws-storage-role-assign-', guid(variables('materializationIdentity'), variables('storageAccount'), 'storage blob data contributor'))]",
"apiVersion": "2020-06-01",
"dependsOn": [
"[resourceId('Microsoft.MachineLearningServices/workspaces', parameters('workspaceName'))]",
"[resourceId('Microsoft.ManagedIdentity/userAssignedIdentities', parameters('materialization_identity_name'))]"
],
"resourceGroup": "[parameters('storageAccountResourceGroupName')]",
"properties": {
"mode": "Incremental",
"template": {
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"resources": [
{
"type": "Microsoft.Authorization/roleAssignments",
"apiVersion": "2022-04-01",
"name": "[guid(variables('materializationIdentity'), variables('storageAccount'), 'storage blob data contributor')]",
"scope": "[variables('storageAccount')]",
"location": "[parameters('location')]",
"properties": {
"roleDefinitionId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')]",
"principalId": "[if(not(equals(parameters('materializationIdentityOption'), 'none')), reference(variables('materializationIdentity'), '2023-01-31').principalId, '')]",
"principalType": "ServicePrincipal"
}
}
]
}
}
},
{
"condition": "[and(variables('enablePE'), not(equals(parameters('privateEndpointType'), 'none')))]",
"type": "Microsoft.Resources/deployments",
Expand Down