Starting April 30, 2025, private endpoint approvals from the
Azure Machine Learning and Microsoft Foundry managed network will no longer be
handled by the internal networking service. Moving forward, either the Azure AI
Enterprise Network Connection Approver RBAC role must be assigned to the
workspace’s managed identity, or a custom role with the necessary private
endpoint connection permissions on the target resource types must be created.
This change addresses security concerns related to the previous automatic role
assignment. Existing resources with approved private endpoints are not
affected, as the appropriate role was already assigned by the service.
Required action: Ensure that a managed identity
is configured for your workspace or hub. Assign either the Azure AI Enterprise
Network Connection Approver role or a custom role to this identity within your
subscription to enable private endpoint approvals. For details on supported
private endpoint target resource types, refer to the official documentation.
Learn
more.