Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,465 questions
endpoint can not access workspaceblob resources
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 41%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Azzouz Marouen (PT/BDO-BD)
0
Reputation points
I created an realtime endpoint, deployment is successful.
Im trying to fetch files from the blobstorage in the run() function with following code:
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 31%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVK%3C/text%3E%3C/svg%3E)
Vinod Kumar Reddy Chilupuri 3,750 Reputation points Microsoft External Staff2025-04-11T12:10:24.1566667+00:00 Hi Azzouz Marouen (PT/BDO-BD),
You’re encountering an AuthorizationFailed error when attempting to access the datastore (
workspaceblobstore) through the Azure Machine Learning client (ml_client). The error message indicates that the client does not have the necessary permissions to perform the action.Even though the resource has blob read rights, the client needs specific Azure Role-Based Access Control (RBAC) permissions to access the datastore within the Machine Learning workspace. To resolve this issue, ensure that the managed identity has the necessary role assignments to access the datastore.
You need to assign the Storage Blob Data Reader role to the managed identity for the workspace blob store. You can do this using the Azure CLI or through the Azure portal.
- Navigate to the Azure Machine Learning workspace.
- Go to Access Control (IAM).
- Add the client (object ID) and assign the required roles.
Here’s how you can assign the role using the Azure CLI:
- Retrieve the system-assigned managed identity for your endpoint:
system_identity=`az ml online-endpoint show --name $ENDPOINT_NAME --query "identity.principal_id" -o tsv` - Assign the Storage Blob Data Reader role:
az role assignment create --assignee-object-id $system_identity --assignee-principal-type ServicePrincipal --role "Storage Blob Data Reader" --scope $storage_id
Make sure that the
storage_idcorresponds to the scope of your workspace blob store. After assigning the necessary permissions, try running your code again.Hope the above suggestion helps! Please let us know do you have any further queries.
Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
-
Azzouz Marouen (PT/BDO-BD) 0 Reputation points
2025-04-11T13:41:57.74+00:00 Hey Vinod,
Thanks for reply!
That didnt clear the issue. I actually already went through exactly the same steps. Here're the cmds (i have of course defined the ENDPOINT_NAME). As already noticed from previous message I also activated theBlob Storage Data readeron the GUI for the -
Vinod Kumar Reddy Chilupuri 3,750 Reputation points Microsoft External Staff
2025-04-11T14:53:06.79+00:00 Hi Azzouz Marouen (PT/BDO-BD),
I understand that the issue persists, even after assigning the Storage Blob Data Reader role at the endpoint, also try assigning the contributor roles that may help you. Could you please provide more details about the problem, including the error message and a screenshot?
This will help us investigate further and narrow down the cause. -
Vinod Kumar Reddy Chilupuri 3,750 Reputation points Microsoft External Staff
2025-04-14T08:51:41.19+00:00 Hi @Azzouz Marouen (PT/BDO-BD),
As mentioned in the above comment, please provide us more details about the problem, including the error message and a screenshot? This will help us investigate further and narrow down the cause.
-
Vinod Kumar Reddy Chilupuri 3,750 Reputation points Microsoft External Staff
2025-04-15T13:57:45.2633333+00:00 Hi Azzouz Marouen (PT/BDO-BD),
I understand that the issue persists, even after assigning the Storage Blob Data Reader role at the endpoint, also try assigning the contributor roles that may help you. Could you please provide more details about the problem, including the error message and a screenshot? This will help us investigate further and narrow down the cause.
Sign in to comment
Sign in to answer