Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Applies to: Microsoft Discovery (Public Preview)
This article describes how to create, update, browse, and delete a Microsoft Discovery workspace using the Azure portal.
Overview
A workspace is a collaborative environment in Microsoft Discovery where teams manage large-scale scientific initiatives. Workspaces bring together infrastructure resources such as supercomputers, agents, tools, and knowledge bases (Bookshelves) into a single secure boundary. You can create projects under workspaces, allowing researchers to organize experiments, analyze data, and use AI agents within a shared space.
After you create a workspace, you can:
- Update the supercomputers attached to the workspace
- Enable or disable public network access
- Browse attached supercomputers, chat model deployments, and project resources
Prerequisites
Before you begin, make sure the following requirements are met:
- An active Azure subscription that is enabled for Microsoft Discovery Public Preview support.
- Microsoft Discovery Platform Administrator (Preview) role or Owner role on the resource group.
- A virtual network with the required subnets (
workspaceSubnet,privateEndpointSubnet,agentSubnet). For more information, see Quickstart: Get started with Microsoft Discovery Infrastructure. - A user-assigned managed identity (UAMI) with the required role assignments. For more information, see Create a User Assigned Managed Identity (UAMI).
- At least one supercomputer created and available for attachment. For more information, see Manage Supercomputer and Nodepools.
Create a workspace
For a complete step-by-step guide to creating a workspace along with all prerequisite resources, see Quickstart: Get started with Microsoft Discovery Infrastructure.
The following steps summarize the workspace creation process:
- Sign in to the Azure portal.
- In the search bar, enter Microsoft Discovery Workspaces.
- Select + Create.
- On the Basics tab, specify:
- Subscription
- Resource group
- Name — must be globally unique and use only lowercase letters
- Region
- Select Next.
- On the Networking tab, configure:
- Public network access — select Enable or Disable based on your requirements.
- Private Endpoint subnet
- Agent subnet
- Workspace subnet
- Select Next.
- On the Encryption tab, choose whether to enable customer-managed keys (CMK) or use Microsoft-managed keys (MMK). Select Next.
- On the Supercomputer tab, select Add Supercomputer and choose your subscription, resource group, and supercomputer. Select Next.
- On the Workspace Identity tab, select Add under User Assigned Managed Identity (UAMI) and select the identity to provide access to the workspace. Select Next.
- Add tags as needed, then select Next.
- Review the Terms and Conditions, then select Review + Create.
- Once validation is successful, select Create.
Important
Make sure your workspace name is globally unique and uses only lowercase letters. Workspace creation typically takes several minutes. Wait until the provisioning state shows Succeeded before proceeding.
Update a workspace
After a workspace is created, you can update the following properties:
- Supercomputers — attach or detach supercomputers from the workspace
- Networking — enable or disable public network access
Update supercomputers
You can attach additional supercomputers to a workspace or detach existing ones.
Attach a supercomputer
- Sign in to the Azure portal.
- In the search bar, enter Microsoft Discovery Workspaces and select your workspace.
- In the left navigation pane, under Settings, select Supercomputers.
- Select Add Supercomputer.
- Choose the subscription, resource group, and supercomputer to attach.
- Select Save.
Detach a supercomputer
- Sign in to the Azure portal.
- In the search bar, enter Microsoft Discovery Workspaces and select your workspace.
- In the left navigation pane, under Settings, select Supercomputers.
- Select the supercomputer you want to detach.
- Select Delete.
- Confirm the removal and select Save Changes.
Important
Detaching a supercomputer doesn't delete the supercomputer resource. It only removes the association between the workspace and the supercomputer. Ensure that no active workloads depend on the supercomputer before detaching it.
Update networking
You can enable or disable public network access for a workspace after creation.
- Sign in to the Azure portal.
- In the search bar, enter Microsoft Discovery Workspaces and select your workspace.
- In the left navigation pane, under Settings, select Networking.
- Select Enable from all networks or Disabled based on your requirements.
- Select Apply to save the changes.
Note
Disabled meaning restricts the workspace to private network connectivity only. Ensure that users and services can reach the workspace through private endpoints, VPN, or ExpressRoute before disabling public access.
Browse workspace resources
The workspace overview in the Azure portal provides access to the key resources associated with your workspace. You can browse the following resources:
Supercomputers
To view the supercomputers attached to your workspace:
- Sign in to the Azure portal.
- In the search bar, enter Microsoft Discovery Workspaces and select your workspace.
- In the left navigation pane, under Settings, select Supercomputers.
This page lists all supercomputers currently attached to the workspace, along with their provisioning state, region, and resource group.
Chat model deployments
To view the chat model deployments configured for your workspace:
- In the workspace resource, in the left navigation pane, under Settings, select Chat Model Deployments.
This page lists all model deployments associated with the workspace, including the model name, format, and deployment status. You can also create new chat model deployments from this page. For more information, see Create Chat Model Deployment.
Projects
To view the projects created under your workspace:
- In the workspace resource, in the left navigation pane, under Settings, select Projects.
This page lists all projects associated with the workspace, including the project name, location, and creation date.
Delete a workspace
Before you delete a workspace, ensure the following:
- All projects under the workspace are deleted.
- No active workloads are running on supercomputers attached to the workspace.
Warning
Deleting a workspace is a permanent action and can't be undone. All configuration, chat model deployments, and project associations are removed.
To delete a workspace:
- Sign in to the Azure portal.
- In the search bar, enter Microsoft Discovery Workspaces and select your workspace.
- On the Overview page, select Delete.
- Confirm the deletion by typing the workspace name.
- Select Delete.
Note
Deleting a workspace doesn't delete the supercomputer resources or the storage accounts associated with it. Those resources must be deleted separately if no longer needed.
Troubleshooting common issues
Workspace creation failures
- Name conflict: Workspace names must be globally unique and lowercase. Choose a different name if creation fails with a naming conflict.
- Insufficient permissions: Ensure you have the Microsoft Discovery Platform Administrator (Preview) role or Owner role on the resource group.
- Subnet delegation: Verify that
workspaceSubnetandagentSubnethave theMicrosoft.App/environmentssubnet delegation configured. - Quota limitations: Check that sufficient quotas are available in the target region. For more information, see Quota reservations.
Networking issues
- Public access disabled but can't connect: Ensure private endpoints, VPN, or ExpressRoute is configured for the workspace virtual network.
- Studio access errors: If you disabled public network access, users must access Microsoft Discovery Studio through a private network path.