Azure Machine Learning
An Azure machine learning service for building and deploying models.
3,343 questions
How to download a model from AML model registry to local using AZCopy tool
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 48%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
Josh Gong
5
Reputation points Microsoft Employee
Hi,
I want to download a model in Azure Machine Learning model registry to my local. I tried to utilize AzCopy tool to achieve this like below:
azcopy copy "https://9061e6857fb.blob.core.windows.net/test-b8a32350-bd24-586d-90b4-c2bb1babfa84/*" "C:\tmp" --recursive
Note: I was able to find the model storage(9061e6857fb) and container name(test-b8a32350-bd24-586d-90b4-c2bb1babfa84) from model.dump() method with Python SDK.
However, I encountered this: RESPONSE Status: 403 This request is not authorized to perform this operation using this permission. Meanwhile, when I login the Azure portal and navigate to the blob container, I do not have the permission to view anything either(even though I created the model registry and uploaded the model).
My question: is the blob container beneath Azure Machine Learning Model Registry not supposed to be accessed directly, even by the owner? If no, would there be a way to assign proper permission?(I tried to assign my login user with blob data owner role for that container in additional to the owner role I already had, but still got permission denied.)
Azure Machine Learning
{count} votes
-
romungi-MSFT 48,916 Reputation points Microsoft Employee Moderator2023-08-18T13:01:28.13+00:00 @Josh Gong I see similar result while using Azcopy too with the direct URL. However, with the blob I used SAS token, and it is able to download the file. See screen shot below:
I think Azcopy supports SAS tokens only for download. Thanks!!
-
Josh Gong 5 Reputation points Microsoft Employee
2023-08-18T17:53:57.61+00:00 Edited below
-
Josh Gong 5 Reputation points Microsoft Employee
2023-08-18T18:08:31.9966667+00:00 @romungi-MSFT thank you for the test. Could you please let me know how you generated the SAS token? I tried to generate it for my container from the portal, but encountered permission issue. sas token error.png Then I checked my access to the container, and found owner and contributor role. my access.png When I tried to add Storage Blob Data Owner role to myself, there was a 403 permission error also.
It looks to me that AML Model Registry has an intrinsic constraint to block any access to its underlying blob container (generate SAS token, view content and etc) with the only exception by AML model registry itself. This is corroborated by the automatically generated "Azure Machine Learning Services User RG access Denier" policy. Would you know if my understanding is right and if no, how could I resolve the permission issue and generate SAS token? Thanks.
-
Josh Gong 5 Reputation points Microsoft Employee
2023-08-18T21:36:13.4966667+00:00 Update:
Although at container level I was not able to assign Storage Blob Data Owner role and subsequentially gain access to the blob container, I was able to do so at subscription level. Now I can at least read the content from my portal. Still cannot generate SAS token for the container due to permission issue - DenyAssignmentAuthorizationFailed. Currently looking into it and will update later.
-
romungi-MSFT 48,916 Reputation points Microsoft Employee Moderator
2023-08-21T07:04:32.6266667+00:00 @Josh Gong I am using the same screen to create a SAS URL. I think the reason you are seeing the permission error is because of the deny role on your access. I do not see that assigned to my storage account that is associated with my workspace though.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 71%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGC%3C/text%3E%3C/svg%3E)
G Cocci 216 Reputation points Microsoft Employee2024-02-01T11:41:40.2533333+00:00 Hi @Josh Gong , I'm having the same problem. Were you able to solve it? Thanks!
-
Sign in to comment
Sign in to answer