You create an Azure Machine Learning workspace. You must create a custom role named DataScientist that meets the following requirements: - Role members must not be able to delete the workspace…

Question

Exhibits

Options

• A{ "Name": "DataScientist", "IsCustom": true, "Description": "Project Data Scientist role", "Actions": [], "NotActions": [ "Microsoft.MachineLearningServices/workspaces//delete", "Microsoft.MachineLearningServices/workspaces/computes//write", "Microsoft.MachineLearningServices/workspaces/computes//delete", "Microsoft.Authorization//write" ], "AssignableScopes": [ "/subscriptions/<id>/resourceGroups/ml-rg/providers/Microsoft.MachineLearningServices/workspaces/ml-ws" ] }
• B{ "Name": "DataScientist", "IsCustom": true, "Description": "Project Data Scientist role", "Actions": [], "NotActions": [ "Microsoft.MachineLearningServices/workspaces/*/write" ], "AssignableScopes": [ "/subscriptions/<id>/resourceGroups/ml-rg/providers/Microsoft.MachineLearningServices/workspaces/ml-ws" ] }
• C{ "Name": "DataScientist", "IsCustom": true, "Description": "Project Data Scientist role", "Actions": [ "Microsoft.MachineLearningServices/workspaces//delete", "Microsoft.MachineLearningServices/workspaces/computes//write", "Microsoft.MachineLearningServices/workspaces/computes//delete", "Microsoft.Authorization//write" ], "NotActions": [], "AssignableScopes": [ "/subscriptions/<id>/resourceGroups/ml-rg/providers/Microsoft.MachineLearningServices/workspaces/ml-ws" ] }
• D{ "Name": "DataScientist", "IsCustom": true, "Description": "Project Data Scientist role", "Actions": [], "NotActions": [], "AssignableScopes": [ "/subscriptions/<id>/resourceGroups/ml-rg/providers/Microsoft.MachineLearningServices/workspaces/ml-ws" ] }

• A
  83% (40)
• B
  2% (1)
• C
  10% (5)
• D
  4% (2)

Explanation

The following custom role can do everything in the workspace except for the following actions: It can't create or update a compute resource. It can't delete a compute resource. It can't add, delete, or alter role assignments. It can't delete the workspace. To create a custom role, first construct a role definition JSON file that specifies the permission and scope for the role. The following example defines a custom role named "Data Scientist Custom" scoped at a specific workspace level: data_scientist_custom_role.json : "Name": "Data Scientist Custom", "IsCustom": true, "Description": "Can run experiment but can't create or delete compute.", "Actions": [""], "Microsoft.MachineLearningServices/workspaces//delete", "Microsoft.MachineLearningServices/workspaces/write", "Microsoft.MachineLearningServices/workspaces/computes//write", "Microsoft.MachineLearningServices/workspaces/computes//delete", "Microsoft.Authorization/*/write" "AssignableScopes": [ "/subscriptions/<subscription_id>/resourceGroups/<resource_group_name>/providers/ Microsoft.MachineLearningServices/workspaces/<workspace_name>" ] https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles

No community discussion yet for this question.