メインコンテンツまでスキップ

Azure account requirements

WIP

  • Azure account requirements

    • Rights (Permissions?) to create Azure resources. Make sure the account deploying AI Unlimited has sufficient permissions to create the roles.

    • Owner permissions on the Azure subscription that you would like to use.

  • Networking requirements

    • The resource group must have an Azure Virtual Network (VNet) configured with a subnet. You can use your existing VNet and subnets or create your own Resource Group, Vnet, Subnet, and role depending on your account permissions.

  • Secure shell (SSH) key pair to access or manage the AI Unlimited instance for running commands or debugging.

    Generate a key pair to securely connect to the AI Unlimited instance ("engine"?) using SSH.

Create a role with the required permissions​

Grabbed this from the Azure Demo installation before we removed it. True for the full installation too?

If the roles defined by your organization cannot deploy AI Unlimited (needs better wording--roles don't deploy), use the role-policy ARM template. This template contains permissions to create an AI Unlimited instance and grants AI Unlimited permissions to create specific IAM [RBAC?] roles and policies for the AI Unlimited engines it deploys. Optionally, you can share the ai-unlimited file with your organization administrator to create the custom role on your behalf. This file contains the subscription-level permissions required for AI Unlimited to deploy AI Unlimited engine instances within your resource groups.

Need to look at the template - any readme.

If you have the permissions needed to create roles, configure the custom roles and policies on the Access control (IAM) page (AWS term) from the Azure portal.

To deploy the role-policy ARM template, do the following: This is "documenting a third-party UI" which we are not really supposed to do.

  1. Sign in your Azure portal and select the deploy a custom template option.

  2. Select Build your own template in the editor and load the role-policy template.

  3. When the file contents appear in the editor, select Save.

  4. On the Custom deployment page, fill in the details in the following fields:

    • Subscription: The Azure subscription that you want to use.

    • Region: The geographic location where you can deploy your resources. Use the location that’s closest to your working location.

    • Name: The name for the role for use with the AI Unlimited instance.

  5. Select Review + Create, and then Create. The template proceeds to deploy a simple network in a few minutes.

You can view the deployment status in Notifications.

The Output tab shows the network names and RoleDefinitionId. You'll need these when you install AI Unlimited.