how-to-move-workspace.md

title	titleSuffix	description	services	author	ms.author	ms.service	ms.subservice	ms.reviewer	ms.topic	ms.date
Move workspace between subscriptions (preview)	Azure Machine Learning	Learn how to move an Azure Machine Learning workspace between Azure subscriptions.	machine-learning	rastala	roastala	machine-learning	core	larryfr	how-to	01/20/2022

Move Azure Machine Learning workspaces between subscriptions (preview)

As the requirements of your machine learning application change, you may need to move your workspace to a different Azure subscription. For example, you may need to move the workspace in the following situations:

• Promote workspace from test subscription to production subscription.
• Change the design and architecture of your application.
• Move workspace to a subscription with more available quota.
• Move workspace to a subscription with different cost center.

Moving the workspace enables you to migrate the workspace and its contents as a single, automated step. The following table describes the workspace contents that are moved:

Workspace contents	Moved with workspace
Datasets	Yes
Experiment runs	Yes
Environments	Yes
Models and other assets stored in the workspace	Yes
Compute resources	No
Endpoints	No

Important

Workspace move is currently in public preview. This preview is provided without a service level agreement, and it's not recommended for production workloads. Certain features might not be supported or might have constrained capabilities. For more information, see Supplemental Terms of Use for Microsoft Azure Previews.

Prerequisites

• An Azure Machine Learning workspace in the source subscription. For more information, see Create an Azure Machine Learning workspace.

• You must have permissions to manage resources in both source and target subscriptions. For example, Contributor or Owner role at the subscription level. For more information on roles, see Azure roles

• The destination subscription must be registered for required resource providers. The following table contains a list of the resource providers required by Azure Machine Learning:

  Resource provider	Why it's needed
  Microsoft.MachineLearningServices	Creating the Azure Machine Learning workspace.
  Microsoft.Storage	Azure Storage Account is used as the default storage for the workspace.
  Microsoft.ContainerRegistry	Azure Container Registry is used by the workspace to build Docker images.
  Microsoft.KeyVault	Azure Key Vault is used by the workspace to store secrets.
  Microsoft.Notebooks/NotebookProxies	Integrated notebooks on Azure Machine Learning compute instance.
  Microsoft.ContainerService	If you plan on deploying trained models to Azure Kubernetes Services.

  If you plan on using a customer-managed key with Azure Machine Learning, then the following service providers must be registered:

  Resource provider	Why it's needed
  Microsoft.DocumentDB/databaseAccounts	Azure CosmosDB instance that logs metadata for the workspace.
  Microsoft.Search/searchServices	Azure Search provides indexing capabilities for the workspace.

  For information on registering resource providers, see Resolve errors for resource provider registration.

• The Azure CLI.

  [!TIP] The move operation does not use the Azure CLI extension for machine learning.

Limitations

• Workspace move is not meant for replicating workspaces, or moving individual assets such as models or datasets from one workspace to another.
• Workspace move doesn't support migration across Azure regions or Azure Active Directory tenants.
• The workspace mustn't be in use during the move operation. Verify that all experiment runs, data profiling runs, and labeling projects have completed. Also verify that inference endpoints aren't being invoked.
• The workspace will become unavailable during the move.
• Before to the move, you must delete or detach computes and inference endpoints from the workspace.

Prepare and validate the move

1. In Azure CLI, set the subscription to that of your origin workspace

   az account set -s origin-sub-id
   

2. Verify that the origin workspace isn't being used. Check that any experiment runs, data profiling runs, or labeling projects have completed. Also verify that inferencing endpoints aren't being invoked.

3. Delete or detach any computes from the workspace, and delete any inferencing endpoints. Moving computes and endpoints isn't supported. Also note that the workspace will become unavailable during the move.

4. Create a destination resource group in the new subscription. This resource group will contain the workspace after the move. The destination must be in the same region as the origin.

   az group create -g destination-rg -l my-region --subscription destination-sub-id                  
   

5. The following command demonstrates how to validate the move operation for workspace. You can include associated resources such as storage account, container registry, key vault, and application insights into the move by adding them to the resources list. The validation may take several minutes. In this command, origin-rg is the origin resource group, while destination-rg is the destination. The subscription IDs are represented by origin-sub-id and destination-sub-id, while the workspace is origin-workspace-name:

   az resource invoke-action --action validateMoveResources --ids "/subscriptions/origin-sub-id/resourceGroups/origin-rg" --request-body "{  \"resources\": [\"/subscriptions/origin-sub-id/resourceGroups/origin-rg/providers/Microsoft.MachineLearningServices/workspaces/origin-workspace-name\"],\"targetResourceGroup\":\"/subscriptions/destination-sub-id/resourceGroups/destination-rg\" }"
   

Move the workspace

Once the validation has succeeded, move the workspace. You may also include any associated resources into move operation by adding them to the ids parameter. This operation may take several minutes.

az resource move --destination-group destination-rg --destination-subscription-id destination-sub-id --ids "/subscriptions/origin-sub-id/resourceGroups/origin-rg/providers/Microsoft.MachineLearningServices/workspaces/origin-workspace-name"

After the move has completed, recreate any computes and redeploy any web service endpoints at the new location.

Next steps

• Learn about resource move