Not allow to access default registry of Azure ML

Question

All the data assets that were visible before are gone. I can only see the most recent ones. The people who have created them have left the company. The data itself is still here but the assets are not visible in the asset page.

When I try to access them from the command line I have:

$ az ml data list --workspace-name shaft-alignment --registry-name workspaceblobstore
$ Operation returned an invalid status 'User/tenant/subscription is not allowed to access registry workspaceblobstore'

I have no idea what is going on :(. Anyone has a similar problem?

Answer 1

Hello Malcolm Mielle,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that the data assets in your Azure Machine Learning workspace are no longer visible in the asset page, and you're also getting an error when trying to list them via the Azure CLI.

There are three major reasons to this, either your Azure subscription, resource group, or workspace configuration that now restrict access to certain resources, or permission issue with the registry, or the assets (metadata) might have been deleted or moved.

You can resolve all these:

1. Make sure your account is having Contributor or Owner role role-based access control (RBAC) permissions to access the workspace and the underlying storage. Use the below code snippet to check using bash command: az role assignment list --assignee <your-user-id> --scope /subscriptions/<your-subscription-id>/resourceGroups/<your-resource-group>/providers/Microsoft.MachineLearningServices/workspaces/<your-workspace-name>
2. Make sure the assets are not hidden or filtered out in the Azure Machine Learning Studio and check if the assets are stored under a different registry or storage location than the one you are querying.
3. Check if assets were registered in a registry (workspaceblobstore), and it is correctly linked to your workspace or disconnected and that your workspace can access it.
4. Since the data is still present, you can directly access the storage (Blob or ADLS) using Azure Storage Explorer or the Azure CLI to list the containers/blobs to ensure the data is still available using bash command: az storage blob list --container-name <your-container-name> --account-name <storage-account-name>
5. Applied policies or restrictions at the subscription level could block access to certain registries or storage accounts. So, check with your IT or DevOps team or contact Azure Support via your Azure Portal.

I hope this is helpful! Do not hesitate to let me know if you have any other questions.

---

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful.