Add users to your data labeling project

This article shows how to add users to your data labeling project so that they can label data, but can't see the rest of your workspace. These steps can add anyone to your project, whether or not they are from a data labeling vendor company.

Prerequisites

• An Azure subscription. If you don't have an Azure subscription, create a trial subscription before you begin.
• An Azure Machine Learning workspace. See Create workspace resources.

You need certain permission levels to follow the steps in this article. If you can't follow one of the steps because of a permissions issue, contact your administrator to request the appropriate permissions.

• To add a guest user, your organization's external collaboration settings needs the correct configuration to allow you to invite guests.
• To add a custom role, you must have Microsoft.Authorization/roleAssignments/write permissions for your subscription - for example, User Access Administrator or Owner.
• To add users to your workspace, you must be an Owner of the workspace.

Add custom role

When you add a user to your project, you assign them a role to define their level of access. Before you add users, define the roles you want to use.

There is a built-in role for data labeling, scoped only to labeling data. If you want to use the built-in role for all your labelers, skip this section and proceed to add guest user.

The following custom roles give other levels of access for a data labeling project. Define all the roles you want to use before moving on to add the users.

To add a custom role, you must have Microsoft.Authorization/roleAssignments/write permissions for your subscription - for example, User Access Administrator.

1. Access the resource group for your workspace in the Azure portal.

   1. Open your workspace in Azure Machine Learning studio.
   2. Open the menu on the top right, and select View all properties in Azure Portal. You use the Azure portal for the remaining steps in this section.
   3. Select the Resource group link in the middle of the page.

2. Add a custom role

   1. On the left, select Access control (IAM).
   2. At the top, select + Add > Add custom role.
   3. For the Custom role name, type the name you want to use. For example, Labeling team lead.
   4. In the Description box, add a description. For example, Team leader for labeling projects.
   5. Select Start from JSON.
   6. Ignore the Select a file entry, even though it is starred. You'll create the JSON in a future step.
   7. At the bottom of the page, select Next.

3. Skip tabs.

   1. Don't do anything for the Permissions tab. You add permissions in a later step. Select Next.
   2. The Assignable scopes tab shows your subscription information. Select Next.

4. Edit the JSON definition.

   1. In the JSON tab, above the edit box, select Edit.

   2. Select lines starting with "actions:" and "notActions:".

      

   3. Replace these two lines with the Actions and NotActions from the appropriate role in the following tabs. Make sure to copy from Actions through the closing bracket, ],.

      • Labeling team lead
      • Vendor account manager
      • Customer QA
      • Vendor QA

      The labeling team lead allows you to review and reject the labeled dataset and view labeling insights. In addition to it, this role also allows you to perform the role of a labeler.

      labeling_team_lead_custom_role.json :

      {
          "Name": "Labeling Team Lead",
          "IsCustom": true,
          "Description": "Team lead for Labeling Projects",
          "Actions": [
              "Microsoft.MachineLearningServices/workspaces/read",
              "Microsoft.MachineLearningServices/workspaces/labeling/labels/read",
              "Microsoft.MachineLearningServices/workspaces/labeling/labels/write",
              "Microsoft.MachineLearningServices/workspaces/labeling/labels/reject/action",
              "Microsoft.MachineLearningServices/workspaces/labeling/labels/update/action",
              "Microsoft.MachineLearningServices/workspaces/labeling/projects/read",
              "Microsoft.MachineLearningServices/workspaces/labeling/projects/summary/read"
          ],
          "NotActions": [
              "Microsoft.MachineLearningServices/workspaces/labeling/projects/write",
              "Microsoft.MachineLearningServices/workspaces/labeling/projects/delete",
              "Microsoft.MachineLearningServices/workspaces/labeling/export/action"
          ],
          "AssignableScopes": [
              "/subscriptions/<subscriptionId>"
          ]
      }
      

   4. Select Save at the top of the edit box to save your changes.

   Important

   Don't select Next until you've saved your edits.

5. After you save your edits, select Next.

6. Select Create to create the custom role.

7. Select OK.

Add guest user

If your labelers are outside of your organization, add them, so they can access your workspace. If labelers are already inside your organization, skip this step and proceed to add users to your workspace.

To add a guest user, your organization's external collaboration settings need the correct configuration to allow you to invite guests.

1. In Azure portal, in the top-left corner, expand the menu and select Microsoft Entra ID.

   

2. On the left, select Users.

3. At the top, select New user.

4. Select Invite external user.

5. Fill in the name and email address for the user.

6. Add a message for the new user.

7. At the bottom of the page, select Invite.

   

Repeat these steps for each of the guest users. Or use the link at the bottom of the Invite user box to invite multiple users in bulk.

Add users to your workspace

Once you have the appropriate users in your system and the role(s) defined, add the users to your workspace so that they can access your data labeling project.

To add users to your workspace, you must be an owner of the workspace.

1. Access your workspace in the Azure portal.

   1. Open your workspace in Azure Machine Learning studio.
   2. Open the menu on the top right, and select View all properties in Azure Portal. You use the Azure portal for the remaining steps in this section.

2. On the left, select Access control (IAM).

3. At the top, select + Add > Add role assignment.

   

4. Select the role you want to use from the list. Use Search if necessary to find it.

5. Select Next.

6. In the middle of the page, next to Members, select the + Select members link.

7. Select each of the users you want to add. Use Search if necessary to find them.

8. At the bottom of the page, select the Select button.

9. Select Next.

10. Verify that the Role is correct, and that your users appear in the Members list.

11. Select Review + assign.

For your labelers

Once labelers have been added as users in the workspace, they can begin labeling in your project. However, they still need information from you to access the project.

Be sure to create your labeling project before you contact your labelers.

• Create an image labeling project.
• Create a text labeling project (preview)

Send the following information to your labelers, after you fill in your workspace and project names:

1. Accept the invite from Microsoft Invitations (invites@microsoft.com).
2. Follow the steps on the web page after you accept. Don't worry if, at the end, you find yourself on a page that says you don't have any apps.
3. Open Azure Machine Learning studio.
4. Use the dropdown to select the workspace <workspace-name>.
5. Select the Label data tool for <project-name>.
6. For more information about how to label data, see Labeling images and text documents.

Related content

• Learn more about working with a data labeling vendor company
• Create an image labeling project and export labels
• Create a text labeling project and export labels (preview)