Muokkaa

Jaa

Azure role-based access control

  • Artikkeli

Custom Vision supports Azure role-based access control (Azure RBAC), an authorization system for managing individual access to Azure resources. Using Azure RBAC, you can assign different team members different levels of permissions for your Custom Vision projects. For more information on Azure RBAC, see the Azure RBAC documentation.

Add role assignment to Custom Vision resource

Azure RBAC can be assigned to a Custom Vision resource. To grant access to an Azure resource, you add a role assignment.

  1. In the Azure portal, navigate to your specific Custom Vision training resource.

    Note

    You can also set up Azure RBAC for whole resource groups, subscriptions, or management groups. Do this by selecting the desired scope level and then navigating to the desired item (for example, selecting Resource groups and then clicking through to your wanted resource group).

  2. Select Access control (IAM) on the left navigation pane.
  3. Select Add -> Add role assignment.
  4. On the Role tab on the next screen, select a role you want to add.
  5. On the Members tab, select a user, group, service principal, or managed identity.
  6. On the Review + assign tab, select Review + assign to assign the role.

Within a few minutes, the target will be assigned the selected role at the selected scope. For help with these steps, see Assign Azure roles using the Azure portal.

Custom Vision role types

Use this table to determine access needs for your Custom Vision resources.

Role Permissions
Cognitive Services Custom Vision Contributor Full access to the projects, including the ability to create, edit, or delete a project.
Cognitive Services Custom Vision Trainer Full access except the ability to create or delete a project. Trainers can view and edit projects and train, publish, unpublish, or export the models.
Cognitive Services Custom Vision Labeler Ability to upload, edit, or delete training images and create, add, remove, or delete tags. Labelers can view projects but can't update anything other than training images and tags.
Cognitive Services Custom Vision Deployment Ability to publish, unpublish, or export the models. Deployers can view projects but can't update a project, training images, or tags.
Cognitive Services Custom Vision Reader Ability to view projects. Readers can't make any changes.

Next steps

Follow a quickstart to get started creating and training a Custom Vision project.