HOTSPOT -
You need to configure security for an Azure Machine Learning service used by groups of data scientists. The groups must have access to only their own experiments and must be able to grant permissions to the members of their team.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
References:
https://docs.microsoft.com/en-us/machine-learning-server/operationalize/configure-roles#how-are-roles-assigned https://docs.microsoft.com/en-us/azure/machine-learning/service/how-to-assign-roles
I believe the second answer should be owner. They need to be able to change role assignments for other members of their team.
I believe the answer is correct "Contributor". as the question says only their own experiment. adding to that contributor can give permission to there projects. " The groups must have access to only their own experiments and must be able to grant permissions to the members of their team"
According to this: https://docs.microsoft.com/en-us/azure/role-based-access-control/overview Contributor can't grant the access.
Contributor can't grant access to resources yes but the question is in reference to a workspace not a resource
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
Contributor can't grant access to resources yes but the question is in reference to a workspace not a resource
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
According to this: https://docs.microsoft.com/en-us/azure/role-based-access-control/overview Contributor can't grant the access.
Contributor can't grant access to resources yes but the question is in reference to a workspace not a resource
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
Contributor can't grant access to resources yes but the question is in reference to a workspace not a resource
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
In the second link provided in the explanation is this line: "An Azure Machine Learning workspace is an Azure resource. Like other Azure resources, when a new Azure Machine Learning workspace is created, it comes with three default roles."
Owner Lets you manage everything, including access to resources. Contributor Lets you manage everything except granting access to resources. Second answer should be owner
Agreed with Karl. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Workspace, Owner
I agree with CodeAnant here.
hold on.. let me put my thoughts// 1. The groups must have access to only their own experiments and 2.must be able to grant permissions to the members of their team. Here point is clear. Point 2 meaning means user to authenticate to workspace . Isn;t it...[[[ it doesn't mean to change role assignments. ]]] So Contributor is Fine.
"must be able to grant access to members of their team" clearly sounds like adding/changing role assignments to me
https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles#default-roles Workspace & Owner
Contributor is correct. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor
answer Workplace and Owner https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles
Owner! Owner is scoped for the Workspace here and cannot access the RG anyway. Giving only Contributor cannot do squat for members of the team.
nowhere could I find that contributor can grant permissions to other members. second one has to be owner like most have said here
Owner--> Full access to the workspace, including the ability to view, create, edit, or delete (where applicable) assets in a workspace. Additionally, you can change role assignments. https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles#default-roles
I just read this in Azure Portal when I try to add new Machine Learning Studio (classic) Workspace: "As the owner of a Workspace, you can invite other users to share the Workspace so you can collaborate with them on predictive analytics solutions."
Manage workspace access If you're an owner of a workspace, you can add and remove roles for the workspace. You can also assign roles to users. Use the following links to discover how to manage access: Azure portal UI PowerShell Azure CLI REST API Azure Resource Manager templates If you have installed the Azure Machine Learning CLI, you can use CLI commands to assign roles to users: Azure CLI Copy Try It az ml workspace share -w <workspace_name>
Second answer needs to be Owner, as the mentioned link clearly states: https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles Manage workspace access If you're an owner of a workspace, you can add and remove roles for the workspace. Y
https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles : Contributor Create and manage all of types of Azure resources Create a new tenant in Azure Active Directory Cannot grant access to others : contributor cannot grant access/permissions to others. Owner is th right answer
Thinks the second answer should be "Contributor". Contributor can manages their published services (which in the configuration it is "owner") so the contributor will maintain some level of functionality like granting access to others on the service they published (pure speculation). Another reasoning is in the link here with a reference for different personas:https://docs.microsoft.com/en-us/machine-learning-server/operationalize/configure-roles#how-are-roles-assigned The data scientists mentioned in this question will be equivalent "R programmer" or "Python Programmer" personas where they will only focuses on the experiments they are working on.
"Contributor - Can create and manage all types of Azure resources but can't grant access to others." https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps
Workspace and owner
Owner - Has full access to all resources including the right to delegate access to others. Contributor - Can create and manage all types of Azure resources but can't grant access to others. https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps
Contributor can grant access; Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries (From Microsoft Site)